diff --git a/podman.spec b/podman.spec
index 0f4e720..c83b00f 100644
--- a/podman.spec
+++ b/podman.spec
@@ -23,7 +23,7 @@ GO111MODULE=off go build -buildmode pie -compiler gc -tags="rpm_crashtraceback $
 Epoch: 2
 Name: podman
 Version: 4.0.2
-Release: 22%{?dist}
+Release: 23%{?dist}
 Summary: Manage Pods, Containers and Container Images
 License: ASL 2.0 and GPLv3+
 URL: https://%{name}.io/
@@ -411,6 +411,15 @@ exit 0
 %{_libexecdir}/%{name}/gvproxy
 
 %changelog
+* Thu Jun 15 2023 Jindrich Novy <jnovy@redhat.com> - 2:4.0.2-23
+- rebuild for following CVEs:
+CVE-2022-41724 CVE-2022-41725 CVE-2023-24537 CVE-2023-24538 CVE-2023-24534 CVE-2023-24536 CVE-2022-41723 CVE-2023-24539 CVE-2023-24540 CVE-2023-29400
+- Resolves: #2179945
+- Resolves: #2187315
+- Resolves: #2187361
+- Resolves: #2203678
+- Resolves: #2207507
+
 * Wed Jun 14 2023 Jindrich Novy <jnovy@redhat.com> - 2:4.0.2-22
 - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.6.1
 - fixes build with the new golang