diff --git a/SPECS/libtirpc.spec b/SPECS/libtirpc.spec
index 305ac5b..259fee5 100644
--- a/SPECS/libtirpc.spec
+++ b/SPECS/libtirpc.spec
@@ -2,7 +2,7 @@
 
 Name:			libtirpc
 Version:		1.1.4
-Release:		4%{?dist}
+Release:		5%{?dist}
 Summary:		Transport Independent RPC Library
 Group:		  	System Environment/Libraries
 License:		SISSL and BSD
@@ -23,6 +23,14 @@ Patch002: libtirpc-1.1.4-dup_ncp-bad-free.patch
 # bz 1641875
 Patch003: libtirpc-1.1.4-fix-EOF-non-block.patch
 
+#
+# RHEL 8.5
+#
+# bz 1854147
+Patch004: libtirpc-1.1.4-blacklist.patch
+# bz 1934866
+Patch005: libtirpc-1.1.4-disallow-auth_refresh.patch
+
 BuildRequires:		automake, autoconf, libtool, pkgconfig
 BuildRequires:		krb5-devel
 
@@ -142,6 +150,10 @@ mv %{buildroot}%{_mandir}/man3 %{buildroot}%{_mandir}/man3t
 %{_mandir}/*/*
 
 %changelog
+* Sat Apr 17 2021 Steve Dickson <steved@redhat.com> 1.1.4-5
+- blacklist: Add a few more well known ports (bz 1854147)
+- Disallow calling auth_refresh from clnt_call with RPCSEC_GSS (bz 1934866)
+
 * Wed Jul 24 2019 Steve Dickson <steved@redhat.com> 1.1.4-4
 - Enable gating using reverse dependency testing of nfs-utils (bz 1681965)
 - Updated the URL (bz 1638671)