diff --git a/download b/download
index 73e19c7a477d1c99e61efecfb1aa8a6a402df251..c3379ce696181054e68ab1701393c544ebdeece3 100644
--- a/download
+++ b/download
@@ -1,2 +1,2 @@
-2194ed2560ee3b2efe937bc3c7c3e2e0  go1.20.12-1-openssl-fips.tar.gz
+0c9728efea933bed07844876916b3ca8  go1.20.12-2-openssl-fips.tar.gz
 15df1e4abd8a1eaa69ca79be9a9cded4  go1.20.12.tar.gz
diff --git a/golang.spec b/golang.spec
index 5f496419e7a17d5b2ce9580121693603708403bc..f07e45bb428d1a3913265fe2865eb68400dc9a4f 100644
--- a/golang.spec
+++ b/golang.spec
@@ -97,11 +97,11 @@
 
 %global go_api 1.20
 %global version 1.20.12
-%global pkg_release 1
+%global pkg_release 2
 
 Name:           golang
 Version:        %{version}
-Release:        3%{anolis_release}%{?dist}
+Release:        8%{anolis_release}%{?dist}
 
 Summary:        The Go Programming Language
 # source tree includes several copies of Mark.Twain-Tom.Sawyer.txt under Public Domain
@@ -251,9 +251,10 @@ Requires:       %{name} = %{version}-%{release}
 pushd ..
 tar -xf %{SOURCE1}
 popd
-patch -p1 < ../go-go%{version}-%{pkg_release}-openssl-fips/patches/000-initial-setup.patch
-patch -p1 < ../go-go%{version}-%{pkg_release}-openssl-fips/patches/001-initial-openssl-for-fips.patch
-patch -p1 < ../go-go%{version}-%{pkg_release}-openssl-fips/patches/002-strict-fips-runtime-detection.patch
+
+for patch in ../go-go%{version}-%{pkg_release}-openssl-fips/patches/*.patch; do
+  patch -p1 < "${patch}"
+done
 
 # Configure crypto tests
 pushd ../go-go%{version}-%{pkg_release}-openssl-fips
@@ -543,14 +544,22 @@ cd ..
 %endif
 
 %changelog
-* Tue Apr 02 2024 Chang Gao <gc-taifu@linux.alibaba.com> - 1.20.12-3.0.1
+* Mon May 13 2024 Chang Gao <gc-taifu@linux.alibaba.com> - 1.20.12-8.0.1
 - disable DISABLE_BoringCertAlgs_TEST test
 - Add LoongArch64 support. (limeidan@loongson.cn)
 
-* Tue Mar 05 2024 David Benoit <dbenoit@redhat.com> - 1.20.12-3
+* Wed Apr 10 2024 David Benoit <dbenoit@redhat.com> - 1.20.12-8
+- Update sources file
+- Related: RHEL-27928
+
+* Tue Apr 09 2024 David Benoit <dbenoit@redhat.com> - 1.20.12-7
 - Fix CVE-2024-1394
 - Resolves: RHEL-27928
 
+* Mon Apr 08 2024 Derek Parker <deparker@redhat.com> - 1.20.12-6
+- Fix CVE-2023-45288
+- Resolves: RHEL-31914
+
 * Wed Dec 13 2023 David Benoit <dbenoit@redhat.com> - 1.20.12-2
 - Fix sources file
 - Related: RHEL-19231