diff --git a/.gitignore b/.gitignore
index 6ee822a..630605c 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,4 +1,4 @@
 SOURCES/dnsname-bdc4ab8.tar.gz
 SOURCES/gvisor-tap-vsock-c62637db4d1417408b84340cbe993843a4984b92.tar.gz
 SOURCES/v0.1.7.tar.gz
-SOURCES/v4.9-rhel-6cc8283.tar.gz
+SOURCES/v4.9-rhel-ff15af1.tar.gz
diff --git a/.podman.metadata b/.podman.metadata
index 9219805..7934f3f 100644
--- a/.podman.metadata
+++ b/.podman.metadata
@@ -1,4 +1,4 @@
 69fb828d3028f968e46420d58cc80bc59e446051 SOURCES/dnsname-bdc4ab8.tar.gz
 78ab2a45bc90b147bc3d7c1c286c375c274bee6a SOURCES/gvisor-tap-vsock-c62637db4d1417408b84340cbe993843a4984b92.tar.gz
 94419a237f932ff2a79c91f6e3005034d9c367a5 SOURCES/v0.1.7.tar.gz
-de7bd8179265bb4223e18cecbf472f0b73be32d7 SOURCES/v4.9-rhel-6cc8283.tar.gz
+b6bada25e1a3dd390b0053dbc48183504e86f2d8 SOURCES/v4.9-rhel-ff15af1.tar.gz
diff --git a/SPECS/podman.spec b/SPECS/podman.spec
index cf3652f..102e0b4 100644
--- a/SPECS/podman.spec
+++ b/SPECS/podman.spec
@@ -8,7 +8,7 @@ GO111MODULE=off go build -buildmode pie -compiler gc -tags="rpm_crashtraceback $
 
 %global import_path github.com/containers/podman
 %global branch v4.9-rhel
-%global commit0 6cc828330733766991e0ed7ef16fb2a624f6eb88
+%global commit0 ff15af15094f81011e691c0f14d7601218973c18
 %global shortcommit0 %(c=%{commit0}; echo ${c:0:7})
 %global cataver 0.1.7
 %global commit_dnsname bdc4ab85266ade865a7c398336e98721e62ef6b2
@@ -20,7 +20,7 @@ GO111MODULE=off go build -buildmode pie -compiler gc -tags="rpm_crashtraceback $
 Epoch: 4
 Name: podman
 Version: 4.9.4
-Release: 22%{?dist}
+Release: 23%{?dist}
 Summary: Manage Pods, Containers and Container Images
 License: Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND ISC AND MIT AND MPL-2.0
 URL: https://%{name}.io/
@@ -423,6 +423,12 @@ fi
 %{_libexecdir}/%{name}/gvproxy
 
 %changelog
+* Thu Sep 11 2025 Jindrich Novy <jnovy@redhat.com> - 4:4.9.4-23
+- update to the latest content of https://github.com/containers/podman/tree/v4.9-rhel
+  (https://github.com/containers/podman/commit/ff15af1)
+- fixes "CVE-2025-9566 container-tools:rhel8/podman: Podman kube play command may overwrite host files [rhel-8.10.z]"
+- Resolves: RHEL-113145
+
 * Wed Jun 25 2025 Jindrich Novy <jnovy@redhat.com> - 4:4.9.4-22
 - update to the latest content of https://github.com/containers/podman/tree/v4.9-rhel
   (https://github.com/containers/podman/commit/6cc8283)