diff --git a/libnbd.spec b/libnbd.spec
index 273d2fe..f82ef8f 100644
--- a/libnbd.spec
+++ b/libnbd.spec
@@ -20,8 +20,8 @@
 %global source_directory 1.20-stable
 
 Name:           libnbd
-Version:        1.20.1
-Release:        5%{?dist}
+Version:        1.20.2
+Release:        1%{?dist}
 Summary:        NBD client library in userspace
 
 License:        LGPL-2.0-or-later AND BSD-3-Clause
@@ -376,6 +376,11 @@ make %{?_smp_mflags} check || {
 
 
 %changelog
+* Fri Jul 19 2024 Richard W.M. Jones <rjones@redhat.com> - 1.20.2-1
+- Rebase to libnbd 1.20.2
+- Fix multiple flaws in TLS server certificate checking
+  resolves: RHEL-49802
+
 * Tue Jun 25 2024 Troy Dawson <tdawson@redhat.com> - 1.20.1-5
 - Bump release for June 2024 mass rebuild
 
diff --git a/sources b/sources
index 1b82619..2a87c66 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
-SHA512 (libnbd-1.20.1.tar.gz) = b3439ae1aa9da900fe2992c642bf021022a4eb6876e74ac4d8518cf9417e93f904e1baea13d944a77d641947b410bddc899e1aff36c661161481e3cfdcd956cc
-SHA512 (libnbd-1.20.1.tar.gz.sig) = 7124421a0cf93cf9ce4ad5deff83b60fb8e25f7b917382c1971cb56e17fc9647839a2abde34ee652a2bc43e233e6c17da04300b64a7632b0bcdd344822b13200
+SHA512 (libnbd-1.20.2.tar.gz) = e390dc57080e9c7b246d1a4c21b80fd9479f7b5eeeaa7a36615c5d6ebf6df2e14f9b2fbebfb9102de282160d531277c6364c74a47619a20fb0646f8222054852
+SHA512 (libnbd-1.20.2.tar.gz.sig) = 84e3d3df8090d451ddbe547712ed606958f1181b91cbaf8c613229677484bce1f2654aea6f7d6efd78982b285553184f7fb5544d212159692c871a9c2567e929