diff --git a/.gitignore b/.gitignore
index 6ca522f..c3fb94d 100644
--- a/.gitignore
+++ b/.gitignore
@@ -142,3 +142,4 @@
 /rpm-ostree-2023.12.tar.xz
 /rpm-ostree-2024.1.tar.xz
 /rpm-ostree-2024.2.tar.xz
+/rpm-ostree-2024.5.tar.xz
diff --git a/rpm-ostree.spec b/rpm-ostree.spec
index efad8c8..761d3fb 100644
--- a/rpm-ostree.spec
+++ b/rpm-ostree.spec
@@ -3,7 +3,7 @@
 
 Summary: Hybrid image/package system
 Name: rpm-ostree
-Version: 2024.2
+Version: 2024.5
 Release: %autorelease
 License: LGPL-2.0-or-later
 URL: https://github.com/coreos/rpm-ostree
@@ -242,6 +242,11 @@ $PYTHON autofiles.py > files.devel \
 # Setup rpm-ostree-countme.timer according to presets
 %post
 %systemd_post rpm-ostree-countme.timer
+# Only enable on rpm-ostree based systems and manually force unit enablement to
+# explicitly ignore presets for this security fix
+if [ -e /run/ostree-booted ]; then
+    ln -snf /usr/lib/systemd/system/rpm-ostree-fix-shadow-mode.service  /usr/lib/systemd/system/multi-user.target.wants/
+fi
 
 %preun
 %systemd_preun rpm-ostree-countme.timer
diff --git a/sources b/sources
index 142ee7f..0633670 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (rpm-ostree-2024.2.tar.xz) = 7ba2d5679444e91ab5efb093c831b1ac035e9609a4a2bb3d24a50d0b67db8712f42cf6b9e0c8e43b33fcc22e7c3c243ce65b667c3fd419a69da48404ec29a110
+SHA512 (rpm-ostree-2024.5.tar.xz) = 6d684f6f8c586cfe5dbccc6831c4d69da8da04907e0a53adb4d995d42878b86466c1b97e8665e30aeeb94d9795bbda76888ccb7bf00b32a5502ffb9dfa045f66