diff --git a/copy-patches.sh b/copy-patches.sh
index 991798c..c045688 100755
--- a/copy-patches.sh
+++ b/copy-patches.sh
@@ -6,7 +6,7 @@ set -e
 # directory.  Use it like this:
 #   ./copy-patches.sh
 
-rhel_version=9.4
+rhel_version=9.5
 
 # Check we're in the right directory.
 if [ ! -f libnbd.spec ]; then
diff --git a/libnbd.spec b/libnbd.spec
index db35ddd..6ebfd04 100644
--- a/libnbd.spec
+++ b/libnbd.spec
@@ -20,7 +20,7 @@
 %global source_directory 1.20-stable
 
 Name:           libnbd
-Version:        1.20.0
+Version:        1.20.2
 Release:        1%{?dist}
 Summary:        NBD client library in userspace
 
@@ -38,7 +38,7 @@ Source2:       libguestfs.keyring
 Source3:        copy-patches.sh
 
 # Patches are stored in the upstream repository:
-# https://gitlab.com/nbdkit/libnbd/-/commits/rhel-9.4/
+# https://gitlab.com/nbdkit/libnbd/-/commits/rhel-9.5/
 
 %if 0%{verify_tarball_signature}
 BuildRequires:  gnupg2
@@ -383,6 +383,12 @@ make %{?_smp_mflags} check || {
 
 
 %changelog
+* Fri Jul 19 2024 Richard W.M. Jones <rjones@redhat.com> - 1.20.2-1
+- Rebase to libnbd 1.20.2
+  resolves: RHEL-31883
+- Fix multiple flaws in TLS server certificate checking
+  resolves: RHEL-49801
+
 * Tue Apr 09 2024 Miroslav Rezanina <mrezanin@redhat.com> - 1.20.0-1
 - Rebase to 1.20.0
   resolves: RHEL-31883
diff --git a/sources b/sources
index 57c1e59..2a87c66 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
-SHA512 (libnbd-1.20.0.tar.gz) = 28b72c8252cc7f497fc87c2a885256bdaeeb5fcf60f8df882e603b94e6a753191a9f081e65f8afc3d70cf1156b78c49ec53b89188bb82f6d2eeb172402ad7bd8
-SHA512 (libnbd-1.20.0.tar.gz.sig) = 214233d7d0f06bd1774d4edba99c3d4bc37715023ca798cc0982820ceaf9cad4926989078a1544897e2fb4bf9b450a8e2d9b9113d4ed8b6eb08d9c5e4618f255
+SHA512 (libnbd-1.20.2.tar.gz) = e390dc57080e9c7b246d1a4c21b80fd9479f7b5eeeaa7a36615c5d6ebf6df2e14f9b2fbebfb9102de282160d531277c6364c74a47619a20fb0646f8222054852
+SHA512 (libnbd-1.20.2.tar.gz.sig) = 84e3d3df8090d451ddbe547712ed606958f1181b91cbaf8c613229677484bce1f2654aea6f7d6efd78982b285553184f7fb5544d212159692c871a9c2567e929