diff --git a/.gitignore b/.gitignore
index 882a87e..8540e85 100644
--- a/.gitignore
+++ b/.gitignore
@@ -33,3 +33,4 @@
 /openjdk-jdk19u-jdk-19.0.2+7.tar.xz
 /openjdk-jdk20u-jdk-20+36.tar.xz
 /openjdk-jdk20u-jdk-20.0.1+9.tar.xz
+/openjdk-jdk20u-jdk-20.0.2+9.tar.xz
diff --git a/NEWS b/NEWS
index 3eb277e..9e7234f 100644
--- a/NEWS
+++ b/NEWS
@@ -3,6 +3,44 @@ Key:
 JDK-X  - https://bugs.openjdk.java.net/browse/JDK-X
 CVE-XXXX-YYYY: https://cve.mitre.org/cgi-bin/cvename.cgi?name=XXXX-YYYY
 
+New in release OpenJDK 20.0.2 (2023-07-18):
+===========================================
+* CVEs
+  - CVE-2023-22041
+  - CVE-2023-22051
+  - CVE-2023-25193
+  - CVE-2023-22044
+  - CVE-2023-22045
+  - CVE-2023-22049
+  - CVE-2023-22036
+  - CVE-2023-22006
+* Other changes
+  - JDK-8208077: File.listRoots performance degradation
+  - JDK-8304741 C2 Intrinsification of Float.floatToFloat16 and Float.float16ToFloat Yields Different Result than the Interpreter
+  - JDK-8306763 GHA: MSVC installation is failing
+  - JDK-8304075 Consider removal of expiry check in VerifyCACerts.java test
+  - JDK-8304077 The "ZonedDateTime.parse" may not accept the "UTC+XX" zone id
+  - JDK-8304227 Corrupted heap dumps due to missing retries for os::write()
+  - JDK-8304424 Update HarfBuzz to 7.0.1
+  - JDK-8304887 javax/swing/JFileChooser/4847375/bug4847375.java fails with AssertionError
+  - JDK-8305123 javac regression: Compilation with --release 8 fails on underscore in enum identifiers
+  - JDK-8305537 Use default visibility for static library builds
+  - JDK-8305540 ArrayFill with store on backedge needs to reduce length by 1
+  - JDK-8305541 C2: Div/Mod nodes without zero check could be split through iv phi of loop resulting in SIGFPE
+  - JDK-8305542 C2: PhaseCFG::convert_NeverBranch_to_Goto must handle both orders of successors
+  - JDK-8305546 C2: Arraycopy intrinsic throws incorrect exception
+  - JDK-8305548 use-after-free related to GraphKit::clone_map
+  - JDK-8305549 SIGSEGV in LibraryCallKit::inline_string_copy due to constant NULL src argument
+  - JDK-8305550 C2: CmpU::Value must filter overflow computation against local sub computation
+  - JDK-8305551 C2 compiled code crashes with SIGFPE with -XX:+StressLCM and -XX:+StressGCM
+  - JDK-8305554 C2: java.lang.StringUTF16::indexOfChar intrinsic called with negative character argument
+  - JDK-8305555 C2: assert(get_ctrl(n) == cle_out) during unrolling
+  - JDK-8305557 Vector.lane() gets wrong value on x86
+
+The full list of changes in 20u can be found at:
+-  * https://builds.shipilev.net/backports-monitor/release-notes-20.0.2.txt
+-  * https://builds.shipilev.net/backports-monitor/pushes-20.0.2.txt
+
 New in release OpenJDK 20.0.1 (2023-04-18):
 ===========================================
 
diff --git a/java-latest-openjdk-portable.spec b/java-latest-openjdk-portable.spec
index 8364bc6..e69d40b 100644
--- a/java-latest-openjdk-portable.spec
+++ b/java-latest-openjdk-portable.spec
@@ -333,7 +333,7 @@
 # New Version-String scheme-style defines
 %global featurever 20
 %global interimver 0
-%global updatever 1
+%global updatever 2
 %global patchver 0
 # buildjdkver is usually same as %%{featurever},
 # but in time of bootstrap of next jdk, it is featurever-1,
@@ -391,7 +391,7 @@
 %global top_level_dir_name   %{origin}
 %global top_level_dir_name_backup %{top_level_dir_name}-backup
 %global buildver        9
-%global rpmrelease      5
+%global rpmrelease      1
 # Priority must be 8 digits in total; up to openjdk 1.8, we were using 18..... so when we moved to 11, we had to add another digit
 %if %is_system_jdk
 # Using 10 digits may overflow the int used for priority, so we combine the patch and build versions
@@ -1627,6 +1627,10 @@ done
 %license %{unpacked_licenses}/%{jdkportablesourcesarchiveForFiles}
 
 %changelog
+* Thu Aug 03 2023 Jiri Vanek <jvanek@redhat.com> - 1:20.0.2.0.9-1.rolling
+- Update to jdk-20.0.2+9
+- Update release notes to 20.0.2+9
+
 * Thu Jul 20 2023 Fedora Release Engineering <releng@fedoraproject.org> - 1:20.0.1.0.9-5.rolling.1
 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
 
diff --git a/sources b/sources
index d90c787..c44230f 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (openjdk-jdk20u-jdk-20.0.1+9.tar.xz) = 41585ff383497464e5d6c278b39bed9eeddc80add72b65bd2ab8c95867ce5bc8bfb0ea860fcaf7c4cc5d41122fd62cf3348fa6c788a1978bdc7f20c3d0289b9b
+SHA512 (openjdk-jdk20u-jdk-20.0.2+9.tar.xz) = ce5383228c42f612e79e65300c048e91ec3ae5941b6769c67c05aa4e98299f8044b2945e64cd38b2e60f3c7558e608a3baa20cf7af2b0108d48c865a71ee1979