diff --git a/python-requests.spec b/python-requests.spec
index ab33a1f4193d3324d665c7b6738abe13aba8fd62..9c70718b44ff93ffcce4ed0568c25dc8cc812f71 100644
--- a/python-requests.spec
+++ b/python-requests.spec
@@ -1,4 +1,3 @@
-%define anolis_release .0.1
 %if 0%{?_module_build}
 # Don't run tests on module-build for now
 # See: https://bugzilla.redhat.com/show_bug.cgi?id=1450608
@@ -11,7 +10,7 @@
 
 Name:           python-requests
 Version:        2.20.0
-Release:        3%{anolis_release}%{?dist}
+Release:        4%{?dist}
 Summary:        HTTP library, written in Python, for human beings
 
 License:        ASL 2.0
@@ -42,12 +41,13 @@ Patch5:         Skip-all-tests-needing-httpbin.patch
 # Properly handle default ports when stripping the authorization header.
 # This fixes a regression introduced with fixing CVE-2018-18074.
 # Fixed upstream: https://github.com/psf/requests/pull/4851
-# Resolves: https://bugzilla.redhat.com/show_bug.cgi?id=1758261
+# Resolves: https://bugzilla.redhat.com/show_bug.cgi?id=1752799
 Patch6:         properly-handle-default-ports-in-auth-stripping.patch
 
-# fix CVE-2023-32681
+# Security fix for CVE-2023-32681
 # Unintended leak of Proxy-Authorization header
 # Resolved upstream: https://github.com/psf/requests/commit/74ea7cf7a6a27a4eeb2ae24e162bcc942a6706d5
+# Tracking bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=2209469
 Patch7:         CVE-2023-32681.patch
 
 BuildArch:      noarch
@@ -112,19 +112,18 @@ PYTHONPATH=%{buildroot}%{python3_sitelib} %{__python3} -m pytest -v
 
 
 %changelog
-* Tue Sep 19 2023 Zhao Hang <wb-zh951434@alibaba-inc.com> - 2.20.0-3.0.1
-- Rebuild for Anolis
+* Mon Jun 26 2023 Lumír Balhar <lbalhar@redhat.com> - 2.20.0-4
+- Bump release to fix upgrade path
+  from 2.20.0-2.1.el8_1 via 2.20.0-3.el8_8 to 2.20.0-4.el8
+Related: rhbz#2209469
 
-* Thu Aug 18 2023 Chen Qiao <qiao.chen@zte.com.cn> - 2.20.0-2.2
-- Fix CVE-2023-32681
-
-* Thu Oct 17 2019 Tomas Orsava <torsava@redhat.com> - 2.20.0-2.1
-- Bumping to enable gating
-Related: rhbz#1758261
+* Wed Jun 21 2023 Lumír Balhar <lbalhar@redhat.com> - 2.20.0-3
+- Security fix for CVE-2023-32681
+Resolves: rhbz#2209469
 
 * Mon Oct 14 2019 Charalampos Stratakis <cstratak@redhat.com> - 2.20.0-2
 - Properly handle default ports when stripping the authorization header
-Resolves: rhbz#1758261
+Resolves: rhbz#1752799
 
 * Mon Oct 29 2018 Jeremy Cline <jeremy@jcline.org> - 2.20.0-1
 - Update to v2.20.0 for CVE-2018-18074.