diff --git a/.buildah.metadata b/.buildah.metadata
index dd7f189..8d897e3 100644
--- a/.buildah.metadata
+++ b/.buildah.metadata
@@ -1 +1 @@
-c3f43583c7affe6ffb1d4e812fcd11faf91d8cab SOURCES/release-1.11-rhel-6a746dc.tar.gz
+80d289a0e9aaf8feb827df7aec25897ffec47bdc SOURCES/release-1.11-rhel-9a4764a.tar.gz
diff --git a/.gitignore b/.gitignore
index ec186c0..30c1433 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1 +1 @@
-SOURCES/release-1.11-rhel-6a746dc.tar.gz
+SOURCES/release-1.11-rhel-9a4764a.tar.gz
diff --git a/SOURCES/1996.patch b/SOURCES/1996.patch
index fd565dd..efd4490 100644
--- a/SOURCES/1996.patch
+++ b/SOURCES/1996.patch
@@ -13,7 +13,7 @@ Signed-off-by: Nalin Dahyabhai <nalin@redhat.com>
  1 file changed, 4 insertions(+)
 
 diff --git a/bind/mount.go b/bind/mount.go
-index e1ae323b9..adde901fd 100644
+index e1ae323b9f..adde901fd1 100644
 --- a/bind/mount.go
 +++ b/bind/mount.go
 @@ -264,6 +264,10 @@ func UnmountMountpoints(mountpoint string, mountpointsToRemove []string) error {
@@ -44,7 +44,7 @@ Signed-off-by: Nalin Dahyabhai <nalin@redhat.com>
  1 file changed, 15 insertions(+), 10 deletions(-)
 
 diff --git a/chroot/run.go b/chroot/run.go
-index fbccbcdb0..76ac78d1f 100644
+index fbccbcdb0d..76ac78d1ff 100644
 --- a/chroot/run.go
 +++ b/chroot/run.go
 @@ -15,6 +15,7 @@ import (
@@ -131,7 +131,7 @@ Signed-off-by: Nalin Dahyabhai <nalin@redhat.com>
  1 file changed, 2 insertions(+), 2 deletions(-)
 
 diff --git a/tests/overlay.bats b/tests/overlay.bats
-index 04056f680..7cc2d0c62 100644
+index 04056f6804..7cc2d0c622 100644
 --- a/tests/overlay.bats
 +++ b/tests/overlay.bats
 @@ -3,14 +3,14 @@
diff --git a/SOURCES/2031.patch b/SOURCES/2031.patch
index b674e80..2f432d9 100644
--- a/SOURCES/2031.patch
+++ b/SOURCES/2031.patch
@@ -15,7 +15,7 @@ Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
  2 files changed, 39 insertions(+), 11 deletions(-)
 
 diff --git a/pkg/secrets/secrets.go b/pkg/secrets/secrets.go
-index 80ca05016..ee2e9a7c8 100644
+index 80ca050165..ee2e9a7c84 100644
 --- a/pkg/secrets/secrets.go
 +++ b/pkg/secrets/secrets.go
 @@ -148,12 +148,21 @@ func getMountsMap(path string) (string, string, error) {
@@ -133,7 +133,7 @@ index 80ca05016..ee2e9a7c8 100644
  }
  
 diff --git a/run_linux.go b/run_linux.go
-index 4c2d73edd..c8e75eada 100644
+index 4c2d73edde..c8e75eada6 100644
 --- a/run_linux.go
 +++ b/run_linux.go
 @@ -460,7 +460,7 @@ func (b *Builder) setupMounts(mountPoint string, spec *specs.Spec, bundlePath st
diff --git a/SPECS/buildah.spec b/SPECS/buildah.spec
index dd9cd7d..347bb60 100644
--- a/SPECS/buildah.spec
+++ b/SPECS/buildah.spec
@@ -14,12 +14,12 @@ go build -buildmode pie -compiler gc -tags="rpm_crashtraceback libtrust_openssl
 
 %global import_path github.com/containers/buildah
 %global branch release-1.11-rhel
-%global commit0 6a746dc0ee433f54f9842ba49cf5aa5c08a65967
+%global commit0 9a4764a02bc6b877a52337a15dfe899a3a694e18
 %global shortcommit0 %(c=%{commit0}; echo ${c:0:7})
 
 Name: buildah
 Version: 1.11.6
-Release: 9%{?dist}
+Release: 10%{?dist}
 Summary: A command line tool used for creating OCI Images
 License: ASL 2.0
 URL: https://%{name}.io
@@ -121,6 +121,12 @@ make DESTDIR=%{buildroot} PREFIX=%{_prefix} -C docs install
 %{_datadir}/%{name}/test
 
 %changelog
+* Mon Apr 11 2022 Jindrich Novy <jnovy@redhat.com> - 1.11.6-10
+- update to the latest content of https://github.com/containers/buildah/tree/release-1.11-rhel
+  (https://github.com/containers/buildah/commit/9a4764a)
+- fixes CVE-2022-27649
+- Resolves: #2067545
+
 * Tue Aug 17 2021 Jindrich Novy <jnovy@redhat.com> - 1.11.6-9
 - update to the latest content of https://github.com/containers/buildah/tree/release-1.11-rhel
   (https://github.com/containers/buildah/commit/6a746dc)