diff --git a/.gitignore b/.gitignore
index 590d41e..91c9d2a 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,3 +1,4 @@
 /opentelemetry-collector-0.102.1.tar.gz
 /opentelemetry-collector-0.107.0.tar.gz
 /redhat-opentelemetry-collector-0.107.0.tar.gz
+/redhat-opentelemetry-collector-0.127.0.tar.gz
diff --git a/opentelemetry-collector.spec b/opentelemetry-collector.spec
index f44e05a..9f9dab4 100644
--- a/opentelemetry-collector.spec
+++ b/opentelemetry-collector.spec
@@ -1,6 +1,6 @@
 %global goipath         github.com/os-observability/redhat-opentelemetry-collector
 
-Version:                0.107.0
+Version:                0.127.0
 ExcludeArch:            %{ix86} s390 ppc ppc64
 
 %gometa
@@ -12,7 +12,7 @@ Collector with the supported components for a Red Hat build of OpenTelemetry}
 %global godocs        README.md
 
 Name:           opentelemetry-collector
-Release:        9%{?dist}
+Release:        1%{?dist}
 Summary:        Red Hat build of OpenTelemetry
 
 License:        Apache-2.0
@@ -106,6 +106,12 @@ fi
 %{_bindir}/*
 
 %changelog
+* Tue Jun 10 2025 Kseniia Nivnia <knivnia@redhat.com> - 0.127.0-1
+- Collector version update
+- Go version update to v1.23.9
+- Update addresses CVE-2025-22871
+  Resolves: RHEL-90009
+
 * Tue Mar 25 2025 Conor Cowman <ccowman@redhat.com> - 0.107.0-9
 - Bump revision
 - Update golang-jwt v5.2.1 to v5.2.2
diff --git a/sources b/sources
index 81c150a..eb46963 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (redhat-opentelemetry-collector-0.107.0.tar.gz) = 58e3f7a24e57027872022927daf7c70653c97e190b5100b13eafed727d4c83387ac7eea1b06512438d1fb7fa9d848a68e1eed2896cf7f9f7de214a71aafe2225
+SHA512 (redhat-opentelemetry-collector-0.127.0.tar.gz) = b997e4f0d35015303a079ddc2fd1b6965e7d5dcd0d97f05704fbc71e626a907e630bc19fa51ad9bae52282fc13a023e95fbb098e7f4dff856de5818d8b770fbf