diff --git a/CHANGELOG.md b/CHANGELOG.md
index b1e66a6bbe..1d1f2a779d 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -2,6 +2,22 @@
 
 # Changelog
 
+## v1.24.7 (2024-04-01)
+
+    [release-1.24] conformance tests: don't break on trailing zeroes
+    [release-1.24] CVE-2024-1753 container escape fix
+    [release-1.24] Cirrus: disable cross_build task
+    Hack: Replace golang with 1.17 for security update
+    bump golang.org/x/crypto to v0.17.0
+    conformance test: ignore file type bits when comparing layers
+    Mask /sys/devices/virtual/powercap by default
+    [release-1.24] Explicitly ref. quay images for CI
+    [release-1.24] remove registry.centos.org
+    [CI:BUILD] Cirrus: Migrate OSX task to M1
+    Define and use a safe, reliable test image
+    define.downloadToDirectory: fail early if bad HTTP response
+    add: fail on bad http response instead of writing to container
+
 ## v1.24.6 (2022-09-20)
 
     run: add container gid to additional groups
diff --git a/changelog.txt b/changelog.txt
index b458bd5cc7..33f70bd9b5 100644
--- a/changelog.txt
+++ b/changelog.txt
@@ -1,3 +1,18 @@
+- Changelog for v1.24.7 (2024-04-01)
+  * [release-1.24] conformance tests: don't break on trailing zeroes
+  * [release-1.24] CVE-2024-1753 container escape fix
+  * [release-1.24] Cirrus: disable cross_build task
+  * Hack: Replace golang with 1.17 for security update
+  * bump golang.org/x/crypto to v0.17.0
+  * conformance test: ignore file type bits when comparing layers
+  * Mask /sys/devices/virtual/powercap by default
+  * [release-1.24] Explicitly ref. quay images for CI
+  * [release-1.24] remove registry.centos.org
+  * [CI:BUILD] Cirrus: Migrate OSX task to M1
+  * Define and use a safe, reliable test image
+  * define.downloadToDirectory: fail early if bad HTTP response
+  * add: fail on bad http response instead of writing to container
+
 - Changelog for v1.24.6 (2022-09-20)
   * run: add container gid to additional groups
 
diff --git a/contrib/rpm/buildah.spec b/contrib/rpm/buildah.spec
index 77b3c8128b..940bd2f58a 100644
--- a/contrib/rpm/buildah.spec
+++ b/contrib/rpm/buildah.spec
@@ -26,7 +26,7 @@
 
 Name:           buildah
 # Bump version in define/types.go too
-Version:        1.24.6
+Version:        1.24.7
 Release:        1.git%{shortcommit}%{?dist}
 Summary:        A command line tool used to creating OCI Images
 License:        ASL 2.0
@@ -100,6 +100,21 @@ make DESTDIR=%{buildroot} PREFIX=%{_prefix} install install.completions
 %{_datadir}/bash-completion/completions/*
 
 %changelog
+* Mon Apr 01 2024 Tom Sweeney <tsweeney@redhat.com> 1.24.7-1
+- [release-1.24] conformance tests: don't break on trailing zeroes
+- [release-1.24] CVE-2024-1753 container escape fix
+- [release-1.24] Cirrus: disable cross_build task
+- Hack: Replace golang with 1.17 for security update
+- bump golang.org/x/crypto to v0.17.0
+- conformance test: ignore file type bits when comparing layers
+- Mask /sys/devices/virtual/powercap by default
+- [release-1.24] Explicitly ref. quay images for CI
+- [release-1.24] remove registry.centos.org
+- [CI:BUILD] Cirrus: Migrate OSX task to M1
+- Define and use a safe, reliable test image
+- define.downloadToDirectory: fail early if bad HTTP response
+- add: fail on bad http response instead of writing to container
+
 * Tue Sep 20 2022 Nalin Dahyabhai <nalin@redhat.com> 1.24.6-1
 - run: add container gid to additional groups
 
diff --git a/define/types.go b/define/types.go
index 4c9efcd4db..5ebc16e0ca 100644
--- a/define/types.go
+++ b/define/types.go
@@ -29,7 +29,7 @@ const (
 	Package = "buildah"
 	// Version for the Package.  Bump version in contrib/rpm/buildah.spec
 	// too.
-	Version = "1.24.6"
+	Version = "1.24.7"
 
 	// DefaultRuntime if containers.conf fails.
 	DefaultRuntime = "runc"