diff --git a/containernetworking-plugins.spec b/containernetworking-plugins.spec
index 5de8bc7..49474df 100644
--- a/containernetworking-plugins.spec
+++ b/containernetworking-plugins.spec
@@ -20,7 +20,7 @@ go build -buildmode pie -compiler gc -tags="rpm_crashtraceback no_openssl ${BUIL
 Epoch: 1
 Name: containernetworking-plugins
 Version: 1.1.1
-Release: 3%{?dist}
+Release: 4%{?dist}
 Summary: CNI network plugins
 License: ASL 2.0
 URL: https://%{provider_prefix}
@@ -125,6 +125,15 @@ export GOPATH=%{buildroot}/%{gopath}:$(pwd)/vendor:%{gopath}
 %{_unitdir}/cni-dhcp.socket
 
 %changelog
+* Thu Jun 15 2023 Jindrich Novy <jnovy@redhat.com> - 1:1.1.1-4
+- rebuild for following CVEs:
+CVE-2022-41724 CVE-2022-41725 CVE-2023-24538 CVE-2023-24534 CVE-2023-24536 CVE-2022-41723 CVE-2023-24539 CVE-2023-24540 CVE-2023-29400
+- Resolves: #2179944
+- Resolves: #2187342
+- Resolves: #2187360
+- Resolves: #2203693
+- Resolves: #2207506
+
 * Tue Mar 14 2023 Jindrich Novy <jnovy@redhat.com> - 1:1.1.1-3
 - bump golang BR to 1.17.7
 - Related: #2176055