diff --git a/.gitignore b/.gitignore
index 9aed8cf..e00b687 100644
--- a/.gitignore
+++ b/.gitignore
@@ -224,3 +224,4 @@
 /lorax-34.9.29.tar.gz
 /lorax-34.9.30.tar.gz
 /lorax-34.9.31.tar.gz
+/lorax-34.9.32.tar.gz
diff --git a/lorax.spec b/lorax.spec
index 5f13fae..fd5359b 100644
--- a/lorax.spec
+++ b/lorax.spec
@@ -3,7 +3,7 @@
 %define debug_package %{nil}
 
 Name:           lorax
-Version:        34.9.31
+Version:        34.9.32
 Release:        1%{?dist}
 Summary:        Tool for creating the anaconda install images
 
@@ -185,6 +185,30 @@ make DESTDIR=$RPM_BUILD_ROOT mandir=%{_mandir} install
 %{_datadir}/lorax/templates.d/*
 
 %changelog
+* Wed Aug 12 2026 Brian C. Lane <bcl@redhat.com> 34.9.32-1
+- tito: Use .tito instead of old ./rel-eng directory (bcl)
+  Related: RHEL-238021
+- creator: Use safe_joinpaths in mount_boot_part_over_root (bcl)
+  Resolves: RHEL-238021
+- creator: Use safe_joinpaths in make_livecd (bcl)
+  Related: RHEL-238021
+- creator: Use safe_joinpaths in make_live_images (bcl)
+  Related: RHEL-238021
+- ltmpl: Check for paths inside outroot on hardlink, symlink, copy, move (bcl)
+  Related: RHEL-238021
+- sysutils: Add safe_joinpaths function (bcl)
+  Related: RHEL-238021
+- ltmpl: Add tests for access outside outroot (bcl)
+  Related: RHEL-238021
+- treebuilder: Check for symlink when writing module-info (bcl)
+  Related: RHEL-238021
+- findkernels: Exclude kernel symlinks pointing outside root (bcl)
+  Related: RHEL-238021
+- novirt_install: Use remove on /tmp paths and /mnt/sysimage (bcl)
+  Related: RHEL-238021
+- sysutils: Add a test for remove and symlinked directories (bcl)
+  Related: RHEL-238021
+
 * Fri Jul 24 2026 Brian C. Lane <bcl@redhat.com> 34.9.31-1
 - Increase root partition to 10 GiB for a live medium (jikortus)
   Resolves: RHEL-214304
diff --git a/sources b/sources
index ac5664c..5d8712c 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (lorax-34.9.31.tar.gz) = 5c4d943716d2b3c27aa4554b9988521be9427419748de3295be7dc25117db77001589f19e9664f64e671dd83c692e1696ba22dd5af21a388c3ff915626bc6507
+SHA512 (lorax-34.9.32.tar.gz) = aef98b8ba4cad73dd79630ec68bb76f00db77fc5cddd5148d955e67d71aa407783d41d130e7bb86c15584caadf2d09e00a3ba026bc6536fc9fac942869e14eb7