diff --git a/.gitignore b/.gitignore
index d3cd1fe..dc9d439 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1 +1 @@
-SOURCES/pki-10.9.3.tar.gz
+SOURCES/pki-10.9.4.tar.gz
diff --git a/.pki-core.metadata b/.pki-core.metadata
index 312b81a..5d8738e 100644
--- a/.pki-core.metadata
+++ b/.pki-core.metadata
@@ -1 +1 @@
-5e3f638d903ce6bbc18d4c9de653a1793b7cbc31 SOURCES/pki-10.9.3.tar.gz
+dd0b6a1732c36077180769ba58ed11e659c0b621 SOURCES/pki-10.9.4.tar.gz
diff --git a/SPECS/pki-core.spec b/SPECS/pki-core.spec
index 45fd68a..004174b 100644
--- a/SPECS/pki-core.spec
+++ b/SPECS/pki-core.spec
@@ -12,7 +12,7 @@ License: GPLv2 and LGPLv2
# For development (unsupported) releases, use x.y.z-0.n.unstable with alpha/beta phase.
# For official (supported) releases, use x.y.z-r where r >=1 without alpha/beta phase.
-Version: 10.9.3
+Version: 10.9.4
Release: 1%{?_timestamp}%{?_commit_id}%{?dist}
#global _phase -a1
@@ -30,6 +30,11 @@ Source: https://github.com/dogtagpki/pki/archive/v%{version}%{?_phase}/pki-%{ver
# <version tag> \
# > pki-VERSION-RELEASE.patch
# Patch: pki-VERSION-RELEASE.patch
+
+# Do not remove this!! pytest-runner isn't available on RHEL. Removing this
+# patch will break RHEL builds. The error message is:
+# BUILDSTDERR: Download error on https://pypi.org/simple/pytest-runner/:
+# [Errno 111] Connection refused -- Some packages may not be found!
Patch1: 0001-Removed-dependency-on-pytest-runner.patch
################################################################################
@@ -1358,6 +1363,10 @@ fi
################################################################################
%changelog
+* Fri Sep 11 2020 Red Hat PKI Team <rhcs-maint@redhat.com> 10.9.4-1
+- Rebased to PKI 10.9.4
+- Red Hat Bugzilla #1873235 - Fix SSL_ERROR_INAPPROPRIATE_FALLBACK_ALERT in pki ca-user-cert-add
+
* Thu Sep 03 2020 Red Hat PKI Team <rhcs-maint@redhat.com> 10.9.3-1
- Rebased to PKI 10.9.3
- Bug #1869893 - Common certificates are missing in CS.cfg on shared PKI instance