diff --git a/.gitignore b/.gitignore
index 88af467..9eff0e7 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1 +1 @@
-SOURCES/v0.8.6.tar.gz
+SOURCES/v0.8.7.tar.gz
diff --git a/.gvisor-tap-vsock.metadata b/.gvisor-tap-vsock.metadata
index 6638a1f..394bd30 100644
--- a/.gvisor-tap-vsock.metadata
+++ b/.gvisor-tap-vsock.metadata
@@ -1 +1 @@
-b2a9876427c774a41c2a052ec4408b4893cd4059 SOURCES/v0.8.6.tar.gz
+fe6a377cf40a6c9a7dbf7196582a6a303feb336f SOURCES/v0.8.7.tar.gz
diff --git a/SPECS/gvisor-tap-vsock.spec b/SPECS/gvisor-tap-vsock.spec
index 20cad1c..1f156ed 100644
--- a/SPECS/gvisor-tap-vsock.spec
+++ b/SPECS/gvisor-tap-vsock.spec
@@ -25,9 +25,9 @@ Epoch: 6
 # If that's what you're reading, Version must be 0, and will be updated by Packit for
 # copr and koji builds.
 # If you're reading this on dist-git, the version is automatically filled in by Packit.
-Version: 0.8.6
+Version: 0.8.7
 License: Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND MIT
-Release: 2%{?dist}
+Release: 1%{?dist}
 %if %{defined golang_arches_future}
 ExclusiveArch: %{golang_arches_future}
 %else
@@ -115,6 +115,10 @@ install -p -m0755 bin/gvforwarder %{buildroot}%{_gvisor_installdir}
 %{_gvisor_installdir}/gvforwarder
 
 %changelog
+* Mon Sep 01 2025 Jindrich Novy <jnovy@redhat.com> - 6:0.8.7-1
+- update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.7
+- Resolves: RHEL-112184
+
 * Wed Jun 11 2025 Jindrich Novy <jnovy@redhat.com> - 6:0.8.6-2
 - rebuild for CVE-2025-22871
 - Resolves: RHEL-90035