diff --git a/.gitignore b/.gitignore
index 359d0ab..88af467 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1 +1 @@
-SOURCES/v0.8.3.tar.gz
+SOURCES/v0.8.6.tar.gz
diff --git a/.gvisor-tap-vsock.metadata b/.gvisor-tap-vsock.metadata
index 92545d1..6638a1f 100644
--- a/.gvisor-tap-vsock.metadata
+++ b/.gvisor-tap-vsock.metadata
@@ -1 +1 @@
-e17a6afcb2d48b6c5963481f51e4ebba5de10ed9 SOURCES/v0.8.3.tar.gz
+b2a9876427c774a41c2a052ec4408b4893cd4059 SOURCES/v0.8.6.tar.gz
diff --git a/SPECS/gvisor-tap-vsock.spec b/SPECS/gvisor-tap-vsock.spec
index c86f506..20cad1c 100644
--- a/SPECS/gvisor-tap-vsock.spec
+++ b/SPECS/gvisor-tap-vsock.spec
@@ -25,9 +25,9 @@ Epoch: 6
 # If that's what you're reading, Version must be 0, and will be updated by Packit for
 # copr and koji builds.
 # If you're reading this on dist-git, the version is automatically filled in by Packit.
-Version: 0.8.3
+Version: 0.8.6
 License: Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND MIT
-Release: 1%{?dist}
+Release: 2%{?dist}
 %if %{defined golang_arches_future}
 ExclusiveArch: %{golang_arches_future}
 %else
@@ -115,6 +115,22 @@ install -p -m0755 bin/gvforwarder %{buildroot}%{_gvisor_installdir}
 %{_gvisor_installdir}/gvforwarder
 
 %changelog
+* Wed Jun 11 2025 Jindrich Novy <jnovy@redhat.com> - 6:0.8.6-2
+- rebuild for CVE-2025-22871
+- Resolves: RHEL-90035
+
+* Fri May 09 2025 Jindrich Novy <jnovy@redhat.com> - 6:0.8.6-1
+- update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.6
+- Related: RHEL-80816
+
+* Tue Mar 18 2025 Jindrich Novy <jnovy@redhat.com> - 6:0.8.5-1
+- update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.5
+- Related: RHEL-80816
+
+* Tue Mar 11 2025 Jindrich Novy <jnovy@redhat.com> - 6:0.8.4-1
+- update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.4
+- Resolves: RHEL-83036
+
 * Tue Feb 04 2025 Jindrich Novy <jnovy@redhat.com> - 6:0.8.3-1
 - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.3
 - Related: RHEL-60277