diff --git a/podman.spec b/podman.spec
index ac4865c..fce0730 100644
--- a/podman.spec
+++ b/podman.spec
@@ -5,7 +5,7 @@ GO111MODULE=off go build -buildmode pie -compiler gc -tags="rpm_crashtraceback $
 
 %global import_path github.com/containers/podman
 %global branch v5.4-rhel
-%global commit0 5e3accd612e57d8e246041b459f9bf5115954bbc
+%global commit0 45c2d1f6a5a63e5b0d1a50cb4ffd826efd412673
 %global shortcommit0 %(c=%{commit0}; echo ${c:0:7})
 %global cataver 0.1.7
 %global commit_dnsname bdc4ab85266ade865a7c398336e98721e62ef6b2
@@ -14,7 +14,7 @@ GO111MODULE=off go build -buildmode pie -compiler gc -tags="rpm_crashtraceback $
 Epoch: 5
 Name: podman
 Version: 5.4.0
-Release: 2%{?dist}
+Release: 3%{?dist}
 Summary: Manage Pods, Containers and Container Images
 License: Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND ISC AND MIT AND MPL-2.0
 URL: https://%{name}.io/
@@ -370,6 +370,12 @@ fi
 %{_datadir}/%{name}/test
 
 %changelog
+* Thu Mar 13 2025 Jindrich Novy <jnovy@redhat.com> - 5:5.4.0-3
+- update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
+  (https://github.com/containers/podman/commit/45c2d1f)
+- fixes "CVE-2025-27144 podman: Go JOSE's Parsing Vulnerable to Denial of Service [rhel-9.7]"
+- Resolves: RHEL-80615
+
 * Fri Mar 07 2025 Jindrich Novy <jnovy@redhat.com> - 5:5.4.0-2
 - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
   (https://github.com/containers/podman/commit/5e3accd)
diff --git a/sources b/sources
index ed05669..e30bb4f 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
 SHA512 (v0.1.7.tar.gz) = 7d3174c60e1c8bd1f4b95b7751ccbe01cac63265060f18914b53311f68f7b4c63c693604f348ccfac5db4a96939169f835fbbbd614803b18062053d94f7dca67
 SHA512 (dnsname-bdc4ab8.tar.gz) = 2c7f4463b439d143c1cc1194b45bbd18e220bd03aa2c466cd81a14d043b753d69d84d331518cca3fab9b75ad5467b73f640f7d8ddce3eee05a5f5507d6f20cef
-SHA512 (v5.4-rhel-5e3accd.tar.gz) = ef83d9df34d97bd6253c3110d5ef270987163b3789b37605b84fd9bfe0008e9c44cdbe782fc2f38f63b1bf60b8061cb28e0aaba59a39a3021fd09e7d49d68493
+SHA512 (v5.4-rhel-45c2d1f.tar.gz) = 746dc81d611df59a1b18cd3d794936ddcd8c224333c861c0981245a4d5f1be92d1708c000eb0fc1f41c5bb593139f24da86e7d9d5fa1c682fb25448d9f1c605e