diff --git a/conmon.spec b/conmon.spec
index 4e6ce1e..1a3fbb0 100644
--- a/conmon.spec
+++ b/conmon.spec
@@ -19,7 +19,7 @@ Epoch: 3
 %else
 Epoch: 2
 %endif
-Version: 2.2.0
+Version: 2.2.1
 License: Apache-2.0
 Release: 1%{?dist}
 Summary: OCI container runtime monitor
@@ -49,7 +49,7 @@ Requires: libseccomp
 sed -i 's/install.bin: bin\/conmon/install.bin:/' Makefile
 
 %build
-%{__make} DEBUGFLAG="-g" bin/conmon
+%{__make} DEBUGFLAG="-g" LDFLAGS="-Wl,-z,relro -Wl,-z,now" bin/conmon
 
 %if %{with docs}
 %{__make} GOMD2MAN=go-md2man -C docs
@@ -75,6 +75,10 @@ sed -i 's/install.bin: bin\/conmon/install.bin:/' Makefile
 %endif
 
 %changelog
+* Thu Feb 12 2026 Jindrich Novy <jnovy@redhat.com> - 2:2.2.1-1
+- update to https://github.com/containers/conmon/releases/tag/v2.2.1
+- Related: RHEL-122178
+
 * Tue Feb 03 2026 Jindrich Novy <jnovy@redhat.com> - 2:2.2.0-1
 - update to https://github.com/containers/conmon/releases/tag/v2.2.0
 - Related: RHEL-122178
diff --git a/sources b/sources
index 4569bb9..f78589d 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (v2.2.0.tar.gz) = 8a14d47be06f3b768118216afc7b9cf5da65c19d896f55febe92250cf9f7aa7c9b8c58736f0a52d44c2ff9f4a6bc99fa3f9ffe22a7905d332b2fd816b3a2e2c9
+SHA512 (v2.2.1.tar.gz) = 52513fc25b0db0b7c9c99aa63f6be4c495add350b9269fad67136f728d3399dbb54c5fa526d52c158c67956ded8980f1cc3624fc531a152b16c09caa3399be3b