diff --git a/.gitignore b/.gitignore
index 913d87d..bca133c 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1 +1 @@
-release-1.41-2ece502.tar.gz
+release-1.41-f85ff89.tar.gz
diff --git a/buildah.spec b/buildah.spec
index 2f19d73..5cf521a 100644
--- a/buildah.spec
+++ b/buildah.spec
@@ -11,7 +11,7 @@
 
 %global import_path github.com/containers/buildah
 %global branch release-1.41
-%global commit0 2ece502d92acf1b3fab0fdf2329c41652440bf40
+%global commit0 f85ff89cf81237e111ab8afbe2c481c7084af16d
 %global shortcommit0 %(c=%{commit0}; echo ${c:0:7})
 
 %if %{defined fedora}
@@ -37,7 +37,7 @@ Epoch: 2
 # If that's what you're reading, Version must be 0, and will be updated by Packit for
 # copr and koji builds.
 # If you're reading this on dist-git, the version is automatically filled in by Packit.
-Version: 1.41.6
+Version: 1.41.8
 # The `AND` needs to be uppercase in the License for SPDX compatibility
 License: Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND ISC AND MIT AND MPL-2.0
 Release: 1%{?dist}
@@ -193,6 +193,18 @@ rm %{buildroot}%{_datadir}/%{name}/test/system/tools/build/*
 %{_datadir}/%{name}/test
 
 %changelog
+* Wed Jan 07 2026 Jindrich Novy <jnovy@redhat.com> - 2:1.41.8-1
+- update to the latest content of https://github.com/containers/buildah/tree/release-1.41
+  (https://github.com/containers/buildah/commit/f85ff89)
+- fixes "CVE-2025-47913 buildah: golang.org/x/crypto/ssh/agent: SSH client panic due to unexpected SSH_AGENT_SUCCESS [rhel-10.1.z]"
+- Resolves: RHEL-134777
+
+* Mon Dec 15 2025 Jindrich Novy <jnovy@redhat.com> - 2:1.41.7-1
+- update to the latest content of https://github.com/containers/buildah/tree/release-1.41
+  (https://github.com/containers/buildah/commit/e363f79)
+- fixes "Bump to runc v1.2.9 or v1.3.4 to get CVE and regression fixes - Buildah [rhel-10.1.z]"
+- Resolves: RHEL-132841
+
 * Thu Nov 20 2025 Jindrich Novy <jnovy@redhat.com> - 2:1.41.6-1
 - update to the latest content of https://github.com/containers/buildah/tree/release-1.41
   (https://github.com/containers/buildah/commit/2ece502)
diff --git a/sources b/sources
index 84fcde6..bd96d30 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (release-1.41-2ece502.tar.gz) = b7fdf263da906c6f226691f7cb2d9fadf02bc1396ffd19f8f64ee206b89f60f65c0aa84975842205a21925dd82a0b48272103fb4daf773ae11373c5821ff41a1
+SHA512 (release-1.41-f85ff89.tar.gz) = 630db1c66b3b6f7ead3c1c374fec493a40f9d9f0cf5df328c07389afddacabc599d4025100e50daab2d8f2f1e0fdad74cab43e863414e71d1c6fd5d77a6dac4b