diff --git a/.gitignore b/.gitignore
index 0f303d8..b5c7415 100644
--- a/.gitignore
+++ b/.gitignore
@@ -417,3 +417,4 @@
 /anaconda-40.22.3.20.tar.bz2
 /anaconda-40.22.3.21.tar.bz2
 /anaconda-40.22.3.22.tar.bz2
+/anaconda-40.22.3.23.tar.bz2
diff --git a/anaconda.spec b/anaconda.spec
index 89793ac..b300c52 100644
--- a/anaconda.spec
+++ b/anaconda.spec
@@ -1,6 +1,6 @@
 Summary: Graphical system installer
 Name:    anaconda
-Version: 40.22.3.22
+Version: 40.22.3.23
 Release: 1%{?dist}.alma.1
 License: GPL-2.0-or-later
 URL:     http://fedoraproject.org/wiki/Anaconda
@@ -493,9 +493,23 @@ rm -rf \
 %{_prefix}/libexec/anaconda/dd_*
 
 %changelog
-* Wed Feb 12 2025 Eduard Abdullin <eabdullin@almalinux.org> - 40.22.3.22-1.alma.1
+* Wed Feb 12 2025 Eduard Abdullin <eabdullin@almalinux.org> - 40.22.3.23-1.alma.1
 - Apply AlmaLinux patches
-- Enable live subpackage by defaul on AlmaLinux
+- Enable live subpackage by default on AlmaLinux
+
+* Fri Feb 07 2025 Radek Vykydal <rvykydal@redhat.com> - 40.22.3.23-1
+- security: add a development note for certificates import in initramfs
+  (rvykydal)
+  Related: RHEL-77156
+- security: do not issue warning on existing certificate file during dump
+  (rvykydal)
+  Resolves: RHEL-77156
+- Add systemd override to make /usr RW in Dracut (mkolman)
+  Resolves: RHEL-77192
+- network: pass NM global dns configuration to the installed system (rvykydal)
+  Resolves: RHEL-71415
+- network: pass global dns initrd option to the installed system (rvykydal)
+  Resolves: RHEL-71415
 
 * Mon Feb 03 2025 Jiri Konecny <jkonecny@redhat.com> - 40.22.3.22-1
 - Fix RDP question will switch to GUI instead of TUI (jkonecny)
diff --git a/sources b/sources
index c4fae09..83bdf15 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (anaconda-40.22.3.22.tar.bz2) = 98686b0bf7d5c6bf21891d9e51fdb2e3a6212f19f88b961098e0f864cae282957ceb914a5c6eb17cf1aa387df282af58ddf8793d9cc94b580f60850fc1842d20
+SHA512 (anaconda-40.22.3.23.tar.bz2) = 5dc28446ede43690c61546eb3c783e93b5517ac0d34ebf172aad3ecf1e10ba427bcd1025d4ec92134f2bbb2f889f967fff4c4731fe420e6ca20a18bc267d8ddc