diff --git a/podman.spec b/podman.spec
index 9b4cd26..6131f64 100644
--- a/podman.spec
+++ b/podman.spec
@@ -20,7 +20,7 @@ GO111MODULE=off go build -buildmode pie -compiler gc -tags="rpm_crashtraceback $
 Epoch: 4
 Name: podman
 Version: 4.9.4
-Release: 35%{?dist}
+Release: 36%{?dist}
 Summary: Manage Pods, Containers and Container Images
 License: Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND ISC AND MIT AND MPL-2.0
 URL: https://%{name}.io/
@@ -415,6 +415,10 @@ fi
 %{_libexecdir}/%{name}/gvproxy
 
 %changelog
+* Thu Aug 20 2026 Jindrich Novy <jnovy@redhat.com> - 4:4.9.4-36
+- rebuild with Go 1.25.11 to fix CVE-2026-33818, CVE-2026-56853, CVE-2026-56858,
+  CVE-2026-56859, CVE-2026-56860, CVE-2026-56862
+
 * Tue Jul 21 2026 Jindrich Novy <jnovy@redhat.com> - 4:4.9.4-35
 - update to the latest content of v4.9-rhel (commit 7440736) - fix podman commit
   nil pointer dereference when ImportBuilder fails - Resolves: RHEL-166084