diff --git a/download b/download
index 54281145313ac70b0edffb7cd0a4f32f12781624..50bfcedd5c0e93e0d628b0e8caaadaf34be9aad2 100644
--- a/download
+++ b/download
@@ -1,4 +1,4 @@
 38ec1fc4dd55a482cc197d58f315104e  dnsname-bdc4ab8.tar.gz
 369f4f472bdd335722c9aa1e6090b160  gvisor-tap-vsock-c62637db4d1417408b84340cbe993843a4984b92.tar.gz
 4e88a5a12a13ec1787eb6b301e839d65  v0.1.7.tar.gz
-866794b226e05fa6b46620da88d7d8d7  v4.9-rhel-bfdd4c2.tar.gz
+b2e4b257e54fdbac8aad9e10ff0b0a5b  v4.9-rhel-0e11f82.tar.gz
diff --git a/podman.spec b/podman.spec
index a1816c6acc9c040a05a24eb08ba255c13d386f36..2275fc8343c3aa79eaf364d32879b05d16339580 100644
--- a/podman.spec
+++ b/podman.spec
@@ -9,7 +9,7 @@ GO111MODULE=off go build -buildmode pie -compiler gc -tags="rpm_crashtraceback $
 
 %global import_path github.com/containers/podman
 %global branch v4.9-rhel
-%global commit0 bfdd4c21124d25f33969e2a755c062ac94e6009d
+%global commit0 0e11f820f48e52ab129fcb42ba8e137b7ce4816c
 %global shortcommit0 %(c=%{commit0}; echo ${c:0:7})
 %global cataver 0.1.7
 %global commit_dnsname bdc4ab85266ade865a7c398336e98721e62ef6b2
@@ -21,7 +21,7 @@ GO111MODULE=off go build -buildmode pie -compiler gc -tags="rpm_crashtraceback $
 Epoch: 4
 Name: podman
 Version: 4.9.4
-Release: 19%{anolis_release}%{?dist}
+Release: 20%{anolis_release}%{?dist}
 Summary: Manage Pods, Containers and Container Images
 License: Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND ISC AND MIT AND MPL-2.0
 URL: https://%{name}.io/
@@ -426,9 +426,15 @@ fi
 %{_libexecdir}/%{name}/gvproxy
 
 %changelog
-* Fri Feb 14 2025 Wenlong Zhang <zhangwenlong@loongson.cn> - 4:4.9.4-19.0.1
+* Thu Mar 27 2025 Wenlong Zhang <zhangwenlong@loongson.cn> - 4:4.9.4-20.0.1
 - add loong64 support for podman
 
+* Mon Mar 17 2025 Jindrich Novy <jnovy@redhat.com> - 4:4.9.4-20
+- update to the latest content of https://github.com/containers/podman/tree/v4.9-rhel
+  (https://github.com/containers/podman/commit/0e11f82)
+- fixes "CVE-2025-22869 container-tools:rhel8/podman: Potential denial of service in golang.org/x/crypto [rhel-8.10.z]"
+- Resolves: RHEL-81299
+
 * Fri Jan 24 2025 Jindrich Novy <jnovy@redhat.com> - 4:4.9.4-19
 - update to the latest content of https://github.com/containers/podman/tree/v4.9-rhel
   (https://github.com/containers/podman/commit/bfdd4c2)