diff --git a/README.debrand b/README.debrand
deleted file mode 100644
index 01c46d2..0000000
--- a/README.debrand
+++ /dev/null
@@ -1,2 +0,0 @@
-Warning: This package was configured for automatic debranding, but the changes
-failed to apply.
diff --git a/SPECS/freeipa.spec b/SPECS/freeipa.spec
index 45b8446..23476ad 100644
--- a/SPECS/freeipa.spec
+++ b/SPECS/freeipa.spec
@@ -1763,25 +1763,25 @@ fi
 
 %changelog
 * Tue Oct 5 2021 Florence Blanc-Renaud <frenaud@redhat.com> - 4.9.6-9
-- Resolves: rhbz#2010195 ipa-server-install fails while 'configuring certificate server instance'
+- Resolves: rhbz#2010701 ipa-server-install fails while 'configuring certificate server instance'
   - Parse getStatus as JSON not XML
   - Parse cert chain as JSON not XML
   - Specify PKI installation log paths
   - Make Dogtag return XML for ipa cert-find
 
 * Fri Sep 17 2021 Florence Blanc-Renaud <frenaud@redhat.com> - 4.9.6-8
-- Resolves: rhbz#2004922  ipa cert-request replaces user certificate instead of adding
+- Resolves: rhbz#2005864 ipa cert-request replaces user certificate instead of adding
  - Don't store entries with a usercertificate in the LDAP cache
  - ipatests: Test that a user can be issued multiple certificates
 
 * Fri Sep 10 2021 Florence Blanc-Renaud <frenaud@redhat.com> - 4.9.6-7
-- Resolves: rhbz#2000629 AVC denied { read } comm="ipa-custodia" on aarch64 during installation of ipa-server
+- Resolves: rhbz#2003005 AVC denied { read } comm="ipa-custodia" on aarch64 during installation of ipa-server
   - selinux policy: allow custodia to access /proc/cpuinfo
-- Resolves: rhbz#2000269 extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
+- Resolves: rhbz#2003004 extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
   - extdom: return LDAP_NO_SUCH_OBJECT if domains differ
-- Resolves: rhbz#2000947 subid: subid-match displays the DN of the owner, not its UID.
+- Resolves: rhbz#2003003 subid: subid-match displays the DN of the owner, not its UID.
   - subid: subid-match: display the owner's ID not DN
-- Resolves: rhbz #2002285 ipa migrate-ds command fails to warn when compat plugin is enabled
+- Resolves: rhbz#2013116 ipa migrate-ds command fails to warn when compat plugin is enabled
   - migrate-ds: workaround to detect compat tree
 
 * Thu Aug 26 2021 Florence Blanc-Renaud <frenaud@redhat.com> - 4.9.6-6