diff --git a/download b/download
index 27483112441024ab7c9fb2ad00e45927207e4f0a..b4cc34de66d8dc171409d5e864238abf114859f5 100644
--- a/download
+++ b/download
@@ -1,2 +1,2 @@
-2f25a32ddb3746dc472ddf3aad9f264c  go1.21.7-1-openssl-fips.tar.gz
-90359cb50dd85dcc051c7e616f2f56fe  go1.21.7.tar.gz
+32ba9785776b705da1d04d3f5d2bd024  go1.21.9-1-openssl-fips.tar.gz
+8350795cdf328920bdf298f4f7df67f9  go1.21.9.tar.gz
diff --git a/golang.spec b/golang.spec
index f649e9700db2208a3a9e9ed3e82697c468333933..927fca868ce8f84ce95adfe6c49995b7bcadfae9 100644
--- a/golang.spec
+++ b/golang.spec
@@ -1,4 +1,4 @@
-%define anolis_release .0.2
+%define anolis_release .0.1
 %undefine _missing_build_ids_terminate_build
 
 %global bcond_with strict_fips
@@ -96,12 +96,12 @@
 %endif
 
 %global go_api 1.21
-%global version 1.21.7
+%global version 1.21.9
 %global pkg_release 1
 
 Name:           golang
 Version:        %{version}
-Release:        2%{anolis_release}%{?dist}
+Release:        1%{anolis_release}%{?dist}
 
 Summary:        The Go Programming Language
 # source tree includes several copies of Mark.Twain-Tom.Sawyer.txt under Public Domain
@@ -538,11 +538,13 @@ cd ..
 %endif
 
 %changelog
-* Wed May 29 2024 Meidan Li <limeidan@loongsonc.cn> - 1.21.7-2.0.2
-- Add LoongArch64 support
-
-* Mon May 27 2024 Chang Gao <gc-taifu@linux.alibaba.com> - 1.21.7-2.0.1
+* Fri May 31 2024 Chang Gao <gc-taifu@linux.alibaba.com> - 1.21.9-1.0.1
 - disable DISABLE_BoringCertAlgs_TEST test
+- Add LoongArch64 support (limeidan@loongsonc.cn)
+
+* Fri Apr 12 2024 David Benoit <dbenoit@redhat.com> - 1.21.9-1
+- Fix CVE-2023-45288
+- Resolves: RHEL-31915
 
 * Mon Apr 1 2024 Archana Ravindar <aravinda@redhat.com> - 1.21.7-2
 - Fix CVE-2024-1394