diff --git a/.gitignore b/.gitignore
index 88f4981..d9972d0 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1 +1 @@
-SOURCES/v1.1.5.tar.gz
+SOURCES/v1.1.12.tar.gz
diff --git a/.runc.metadata b/.runc.metadata
index 214b28b..88ea42c 100644
--- a/.runc.metadata
+++ b/.runc.metadata
@@ -1 +1 @@
-ad45aea7b8f05ffd428bc9fa1aa0ebec76604479 SOURCES/v1.1.5.tar.gz
+3fac650358578b8694012a44b1d5b156523c3402 SOURCES/v1.1.12.tar.gz
diff --git a/SPECS/runc.spec b/SPECS/runc.spec
index 5fba242..1eb7d2b 100644
--- a/SPECS/runc.spec
+++ b/SPECS/runc.spec
@@ -22,8 +22,8 @@ go build -buildmode pie -compiler gc -tags="rpm_crashtraceback libtrust_openssl
 
 Epoch: 1
 Name: %{repo}
-Version: 1.1.5
-Release: 2%{?dist}
+Version: 1.1.12
+Release: 1%{?dist}
 Summary: CLI for running Open Containers
 # https://fedoraproject.org/wiki/PackagingDrafts/Go#Go_Language_Architectures
 #ExclusiveArch: %%{go_arches}
@@ -34,7 +34,7 @@ License: ASL 2.0
 URL: %{git0}
 Source0: %{git0}/archive/v%{version}.tar.gz
 Provides: oci-runtime
-BuildRequires: golang >= 1.17.7
+BuildRequires: golang >= 1.20.6
 BuildRequires: git
 BuildRequires: /usr/bin/go-md2man
 BuildRequires: libseccomp-devel >= 2.5
@@ -85,6 +85,11 @@ make install install-man install-bash DESTDIR=$RPM_BUILD_ROOT PREFIX=%{_prefix}
 %{_datadir}/bash-completion/completions/%{name}
 
 %changelog
+* Thu Feb 01 2024 Jindrich Novy <jnovy@redhat.com> - 1:1.1.12-1
+- update to https://github.com/opencontainers/runc/releases/tag/v1.1.12
+- fixes CVE-2024-21626
+- Resolves: RHEL-23587
+
 * Tue Dec 12 2023 MSVSphere Packaging Team <packager@msvsphere-os.ru> - 1:1.1.5-2
 - Rebuilt for MSVSphere 8.8