diff --git a/.gitignore b/.gitignore
index 50880b4..d0596ee 100644
--- a/.gitignore
+++ b/.gitignore
@@ -130,3 +130,5 @@ checkpolicy-2.0.22.tgz
 /checkpolicy-3.8-rc3.tar.gz.asc
 /checkpolicy-3.8.tar.gz
 /checkpolicy-3.8.tar.gz.asc
+/checkpolicy-3.9-rc2.tar.gz
+/checkpolicy-3.9-rc2.tar.gz.asc
diff --git a/changelog b/changelog
index 7d6f34c..92acb03 100644
--- a/changelog
+++ b/changelog
@@ -1,3 +1,6 @@
+* Fri Jul 04 2025 Petr Lautrbach <lautrbach@redhat.com> - 3.9-0.rc2.1.1
+- SELinux userspace 3.9-rc2 release
+
 * Fri Jan 31 2025 Petr Lautrbach <lautrbach@redhat.com> - 3.8-1
 - SELinux userspace 3.8 release
 
diff --git a/checkpolicy.spec b/checkpolicy.spec
index eb3a26b..e34d598 100644
--- a/checkpolicy.spec
+++ b/checkpolicy.spec
@@ -1,17 +1,17 @@
-%define libselinuxver 3.8-1
-%define libsepolver 3.8-1
+%define libselinuxver 3.9-0
+%define libsepolver 3.9-0
 
 Summary: SELinux policy compiler
 Name: checkpolicy
-Version: 3.8
-Release: 1%{?dist}
+Version: 3.9
+Release: 0.rc2.1%{?dist}.1
 License: GPL-2.0-or-later AND LGPL-2.1-or-later
-Source0: https://github.com/SELinuxProject/selinux/releases/download/%{version}/checkpolicy-%{version}.tar.gz
-Source1: https://github.com/SELinuxProject/selinux/releases/download/%{version}/checkpolicy-%{version}.tar.gz.asc
+Source0: https://github.com/SELinuxProject/selinux/releases/download/%{version}-rc2/checkpolicy-%{version}-rc2.tar.gz
+Source1: https://github.com/SELinuxProject/selinux/releases/download/%{version}-rc2/checkpolicy-%{version}-rc2.tar.gz.asc
 Source2: https://github.com/bachradsusi.gpg
 # $ git clone https://github.com/fedora-selinux/selinux.git
 # $ cd selinux
-# $ git format-patch -N 3.8 -- checkpolicy
+# $ git format-patch -N 3.9-rc2 -- checkpolicy
 # $ i=1; for j in 00*patch; do printf "Patch%04d: %s\n" $i $j; i=$((i+1));done
 # Patch list start
 # Patch list end
@@ -37,7 +37,7 @@ Only required for building policies.
 
 %prep
 %{gpgverify} --keyring='%{SOURCE2}' --signature='%{SOURCE1}' --data='%{SOURCE0}'
-%autosetup -p 2 -n checkpolicy-%{version}
+%autosetup -p 2 -n checkpolicy-%{version}-rc2
 
 %build
 
diff --git a/sources b/sources
index 44fc464..1a5a818 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
-SHA512 (checkpolicy-3.8.tar.gz) = 644e82a681faa398ee5fa9705ff7213f8105afcf2d6e3e3b5a593eeb300fa0b5d38a8188e28bb1e33ff41b9162f4131d5dd5359a13278acda8307f779b0cd9e9
-SHA512 (checkpolicy-3.8.tar.gz.asc) = 6ca57762a5514c5f7aacfe4d390fa55aac0a0fb02a35a3d7d4afdecbf2fa29c984affd6a733ec77d34fc3641ee02973aaf44e788dc45559193b9c7d553e5bdb6
+SHA512 (checkpolicy-3.9-rc2.tar.gz) = 5b76c5685c0752de3fec3bffedef8d70ff10039f7fd651687c47b3c070497ca325a0ce9a6013b7c8f850e45dfef92972692290ae427108092ce475cba0a890cc
+SHA512 (checkpolicy-3.9-rc2.tar.gz.asc) = 98ad892a7797f0f704b498a919d8d9c01c0a81a2c287c994597c3035002cc83b778389eded3433cdf0d203852bbae9d948f94d42a31b01aefcd2fee489e10c4f