diff --git a/kernel.spec b/kernel.spec
index 4c9c853bf..6a126d75e 100644
--- a/kernel.spec
+++ b/kernel.spec
@@ -38,10 +38,10 @@
 # define buildid .local
 
 %define specversion 4.18.0
-%define pkgrelease 553.128.1.el8_10
+%define pkgrelease 553.129.1.el8_10
 
 # allow pkg_release to have configurable %%{?dist} tag
-%define specrelease 553.128.1%{?dist}
+%define specrelease 553.129.1%{?dist}
 
 %define pkg_release %{specrelease}%{?buildid}
 
@@ -2707,6 +2707,9 @@ fi
 #
 #
 %changelog
+* Tue Jun 02 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [4.18.0-553.129.1.el8_10]
+- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178938] {CVE-2026-46243}
+
 * Fri May 29 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [4.18.0-553.128.1.el8_10]
 - smb: client: fix OOB reads parsing symlink error response (Paulo Alcantara) [RHEL-171465] {CVE-2026-31613}
 - geneve: Suppress list corruption splat in geneve_destroy_tunnels(). (Antoine Tenart) [RHEL-168961]
diff --git a/sources b/sources
index 3c21fe362..bb409ea67 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-SHA512 (linux-4.18.0-553.128.1.el8_10.tar.xz) = a7af001e757ca275383f229d854361387b57388124c7aeb26e941d6eed560e6b5ac3e9ec0fe9555ac93ddb0f489b1d9b121f89a7e7412a7fdb0ba08c4783baa4
-SHA512 (kernel-abi-stablelists-4.18.0-553.tar.bz2) = a39b801a483f2387fcdd1a9a65019f5b29485b2a81e6bb8ed11768e0cd8c4a3cc331681de8b14615bdf0e9074f3f340c50abc70115b7113445be2215a53f55c9
-SHA512 (kernel-kabi-dw-4.18.0-553.tar.bz2) = d8a36d848038d3fcd6a3e40a5b2354850bf12797060090ad49f4ed773eab717b22ceb42961278b563f7165b629400430cda7067eb96c4ca4f6e1f68d0757d997
+SHA512 (linux-4.18.0-553.129.1.el8_10.tar.xz) = 87151c810d3095ededdd9ea0d66e96c7ca398e763142d1c60454d0d8e8fce20af340bbacf9e7b8eeec6e56fdda7ffda9c1c4b0eec31e09455df056244e6f129f
+SHA512 (kernel-abi-stablelists-4.18.0-553.tar.bz2) = 2a4e65c98f0998a3eb3506eb17bce9d91f02357ed67a98c6e719948c1576c164c0039cbb8e2d51a764f4b3796a40ac0903a40606ead17ea96269d032a3bc2b01
+SHA512 (kernel-kabi-dw-4.18.0-553.tar.bz2) = 11564f3ffcbfcf0429e3048c4bf1f0595cd4c46e1c5a339b1cb2ec1d38a8ae55f99f57d8995037e3c19e2a46faeabd8fa3391e5a97479ac7141aefa475b16fef