diff --git a/podman.spec b/podman.spec
index cbb1938..97a1c6d 100644
--- a/podman.spec
+++ b/podman.spec
@@ -8,7 +8,7 @@ GO111MODULE=off go build -buildmode pie -compiler gc -tags="rpm_crashtraceback $
 
 %global import_path github.com/containers/podman
 %global branch v4.9-rhel
-%global commit0 bfdd4c21124d25f33969e2a755c062ac94e6009d
+%global commit0 0e11f820f48e52ab129fcb42ba8e137b7ce4816c
 %global shortcommit0 %(c=%{commit0}; echo ${c:0:7})
 %global cataver 0.1.7
 %global commit_dnsname bdc4ab85266ade865a7c398336e98721e62ef6b2
@@ -20,7 +20,7 @@ GO111MODULE=off go build -buildmode pie -compiler gc -tags="rpm_crashtraceback $
 Epoch: 4
 Name: podman
 Version: 4.9.4
-Release: 19%{?dist}
+Release: 20%{?dist}
 Summary: Manage Pods, Containers and Container Images
 License: Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND ISC AND MIT AND MPL-2.0
 URL: https://%{name}.io/
@@ -423,6 +423,12 @@ fi
 %{_libexecdir}/%{name}/gvproxy
 
 %changelog
+* Mon Mar 17 2025 Jindrich Novy <jnovy@redhat.com> - 4:4.9.4-20
+- update to the latest content of https://github.com/containers/podman/tree/v4.9-rhel
+  (https://github.com/containers/podman/commit/0e11f82)
+- fixes "CVE-2025-22869 container-tools:rhel8/podman: Potential denial of service in golang.org/x/crypto [rhel-8.10.z]"
+- Resolves: RHEL-81299
+
 * Fri Jan 24 2025 Jindrich Novy <jnovy@redhat.com> - 4:4.9.4-19
 - update to the latest content of https://github.com/containers/podman/tree/v4.9-rhel
   (https://github.com/containers/podman/commit/bfdd4c2)
diff --git a/sources b/sources
index 236d28d..36fa6d5 100644
--- a/sources
+++ b/sources
@@ -1,4 +1,4 @@
 SHA512 (dnsname-bdc4ab8.tar.gz) = 2c7f4463b439d143c1cc1194b45bbd18e220bd03aa2c466cd81a14d043b753d69d84d331518cca3fab9b75ad5467b73f640f7d8ddce3eee05a5f5507d6f20cef
 SHA512 (v0.1.7.tar.gz) = 7d3174c60e1c8bd1f4b95b7751ccbe01cac63265060f18914b53311f68f7b4c63c693604f348ccfac5db4a96939169f835fbbbd614803b18062053d94f7dca67
 SHA512 (gvisor-tap-vsock-c62637db4d1417408b84340cbe993843a4984b92.tar.gz) = 393142016cebd14426377706c5409dd26c08a0c4b0e7268fae9040c96bcea1e0944fac97cfff989529f833f2d956f03f29c2d8ee0668bfd34474bf387d2b2438
-SHA512 (v4.9-rhel-bfdd4c2.tar.gz) = 8445a5d29988b09e12490c0eae3ba591f5cb30f601eadca2d521df95795d081c9630dab5764fde52159e1694079a3b9567e5fdc502d20c1ab0a48bf976c43d34
+SHA512 (v4.9-rhel-0e11f82.tar.gz) = fea43ee3874ea942c683d539618b150bdf46f2f1c87381faa035db46cf2ccebb78f7bbddef2d30cb3ce6b37eb3827a3681542fe49825840e681d0afa79f4e4d4