diff --git a/.gitignore b/.gitignore
index 1ff0d16..d9972d0 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1 +1 @@
-SOURCES/v1.1.9.tar.gz
+SOURCES/v1.1.12.tar.gz
diff --git a/.runc.metadata b/.runc.metadata
index c55758d..88ea42c 100644
--- a/.runc.metadata
+++ b/.runc.metadata
@@ -1 +1 @@
-432b3efbe34aaf71e802599946222b9d4918a49b SOURCES/v1.1.9.tar.gz
+3fac650358578b8694012a44b1d5b156523c3402 SOURCES/v1.1.12.tar.gz
diff --git a/SPECS/runc.spec b/SPECS/runc.spec
index fed6807..964deb5 100644
--- a/SPECS/runc.spec
+++ b/SPECS/runc.spec
@@ -19,8 +19,8 @@ go build -buildmode pie -compiler gc -tags="rpm_crashtraceback libtrust_openssl
 
 Epoch: 4
 Name: %{repo}
-Version: 1.1.9
-Release: 2%{?dist}
+Version: 1.1.12
+Release: 1%{?dist}
 Summary: CLI for running Open Containers
 # https://fedoraproject.org/wiki/PackagingDrafts/Go#Go_Language_Architectures
 #ExclusiveArch: %%{go_arches}
@@ -82,6 +82,11 @@ make install install-man install-bash DESTDIR=$RPM_BUILD_ROOT PREFIX=%{_prefix}
 %{_datadir}/bash-completion/completions/%{name}
 
 %changelog
+* Thu Feb 01 2024 Jindrich Novy <jnovy@redhat.com> - 4:1.1.12-1
+- update to https://github.com/opencontainers/runc/releases/tag/v1.1.12
+- fixes CVE-2024-21626
+- Resolves: RHEL-23596
+
 * Sat Dec 02 2023 Lokesh Mandvekar <lsm5@redhat.com> - 4:1.1.9-2
 - Rebuild for CVEs: CVE-2023-39321 CVE-2023-39322 CVE-2023-29409
 - Related: Jira:RHEL-2792