diff --git a/SPECS/containernetworking-plugins.spec b/SPECS/containernetworking-plugins.spec
index 301c7aa..bb043be 100644
--- a/SPECS/containernetworking-plugins.spec
+++ b/SPECS/containernetworking-plugins.spec
@@ -20,7 +20,7 @@ go build -buildmode pie -compiler gc -tags="rpm_crashtraceback ${BUILDTAGS:-}" -
 Epoch: 1
 Name: containernetworking-plugins
 Version: 1.4.0
-Release: 7%{?dist}
+Release: 8%{?dist}
 Summary: CNI network plugins
 License: ASL 2.0
 URL: https://%{provider_prefix}
@@ -126,6 +126,10 @@ export GOPATH=%{buildroot}/%{gopath}:$(pwd)/vendor:%{gopath}
 %{_unitdir}/cni-dhcp.socket
 
 %changelog
+* Tue Feb 17 2026 Jindrich Novy <jnovy@redhat.com> - 1:1.4.0-8
+- rebuild for CVE-2025-68121
+- Resolves: RHEL-149265
+
 * Mon Feb 02 2026 Jindrich Novy <jnovy@redhat.com> - 1:1.4.0-7
 - rebuild for CVE-2025-61729
 - Resolves: RHEL-140529