diff --git a/download b/download
index d54f770f1fb15c4655619416373333d8d7968e92..537afaafabfa5c6b457ffa3080da11089fd06659 100644
--- a/download
+++ b/download
@@ -1,4 +1,4 @@
 38ec1fc4dd55a482cc197d58f315104e  dnsname-bdc4ab8.tar.gz
 369f4f472bdd335722c9aa1e6090b160  gvisor-tap-vsock-c62637db4d1417408b84340cbe993843a4984b92.tar.gz
 4e88a5a12a13ec1787eb6b301e839d65  v0.1.7.tar.gz
-ababded2e979fc75e877b0ab19f1db29  v4.9-rhel-6cc8283.tar.gz
+c3b5cac97c1a1560b1317253851e29b7  v4.9-rhel-ff15af1.tar.gz
diff --git a/podman.spec b/podman.spec
index 5cc73832b7cc2f00d9cef673b740fa767f10cd3c..ab827950a608fcd54eda49ecd2a4166ab0562351 100644
--- a/podman.spec
+++ b/podman.spec
@@ -9,7 +9,7 @@ GO111MODULE=off go build -buildmode pie -compiler gc -tags="rpm_crashtraceback $
 
 %global import_path github.com/containers/podman
 %global branch v4.9-rhel
-%global commit0 6cc828330733766991e0ed7ef16fb2a624f6eb88
+%global commit0 ff15af15094f81011e691c0f14d7601218973c18
 %global shortcommit0 %(c=%{commit0}; echo ${c:0:7})
 %global cataver 0.1.7
 %global commit_dnsname bdc4ab85266ade865a7c398336e98721e62ef6b2
@@ -21,7 +21,7 @@ GO111MODULE=off go build -buildmode pie -compiler gc -tags="rpm_crashtraceback $
 Epoch: 4
 Name: podman
 Version: 4.9.4
-Release: 22%{anolis_release}%{?dist}
+Release: 23%{anolis_release}%{?dist}
 Summary: Manage Pods, Containers and Container Images
 License: Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND ISC AND MIT AND MPL-2.0
 URL: https://%{name}.io/
@@ -426,9 +426,15 @@ fi
 %{_libexecdir}/%{name}/gvproxy
 
 %changelog
-* Wed Jul 09 2025 Wenlong Zhang <zhangwenlong@loongson.cn> - 4:4.9.4-22.0.1
+* Wed Sep 17 2025 Wenlong Zhang <zhangwenlong@loongson.cn> - 4:4.9.4-23.0.1
 - add loong64 support for podman
 
+* Thu Sep 11 2025 Jindrich Novy <jnovy@redhat.com> - 4:4.9.4-23
+- update to the latest content of https://github.com/containers/podman/tree/v4.9-rhel
+  (https://github.com/containers/podman/commit/ff15af1)
+- fixes "CVE-2025-9566 container-tools:rhel8/podman: Podman kube play command may overwrite host files [rhel-8.10.z]"
+- Resolves: RHEL-113145
+
 * Wed Jun 25 2025 Jindrich Novy <jnovy@redhat.com> - 4:4.9.4-22
 - update to the latest content of https://github.com/containers/podman/tree/v4.9-rhel
   (https://github.com/containers/podman/commit/6cc8283)