diff --git a/.gitignore b/.gitignore
index c2fdb47..8bd310e 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1 +1 @@
-SOURCES/osbuild-composer-118.1.tar.gz
+SOURCES/osbuild-composer-118.2.tar.gz
diff --git a/.osbuild-composer.metadata b/.osbuild-composer.metadata
index 91c7b92..27a1dc0 100644
--- a/.osbuild-composer.metadata
+++ b/.osbuild-composer.metadata
@@ -1 +1 @@
-17ad7ef58c3f7f935fbff07d627090822e2d8801 SOURCES/osbuild-composer-118.1.tar.gz
+e32e37dd58dbfdd77467c6318759e5905ec80a84 SOURCES/osbuild-composer-118.2.tar.gz
diff --git a/SPECS/osbuild-composer.spec b/SPECS/osbuild-composer.spec
index 714a55d..f691c3e 100644
--- a/SPECS/osbuild-composer.spec
+++ b/SPECS/osbuild-composer.spec
@@ -12,7 +12,7 @@
 
 %global goipath         github.com/osbuild/osbuild-composer
 
-Version:        118.1
+Version:        118.2
 
 %gometa
 
@@ -25,7 +25,7 @@ It is compatible with composer-cli and cockpit-composer clients.
 }
 
 Name:           osbuild-composer
-Release:        2%{?dist}.alma.1
+Release:        1%{?dist}.alma.1
 Summary:        An image building service based on osbuild
 
 # osbuild-composer doesn't have support for building i686 and armv7hl images
@@ -474,16 +474,19 @@ Integration tests to be run on a pristine-dedicated system to test the osbuild-c
 %endif
 
 %changelog
-* Fri Apr 25 2025 Eduard Abdullin <eabdullin@almalinux.org> - 118.1-2.alma.1
+* Mon May 12 2025 Eduard Abdullin <eabdullin@almalinux.org> - 118.2-1.alma.1
 - Install AlmaLinux repositories
 - Add AlmaLinux support patch (Thanks @pastalian)
 - Remove libreport-rhel-bugzilla from package set
 
+* Thu May 08 2025 Darren Archibald <darren.archibald@oracle.com> - 118.2-1
+- jwt-go allows excessive memory allocation during header parsing (CVE-2025-30204)
+
 * Wed Apr 23 2025 Teo Gonzalez <teo.g.gonzalez@oracle.com> - 118.1-2
 - osbuild-composer is not able to build RHEL-8 images since RHEL-9.5 RHEL-83780
 
 * Wed Sep 25 2024 Tomáš Hozza <thozza@redhat.com> - 118-2
-- Rebuilt to fix: 
+- Rebuilt to fix:
   - CVE-2024-34156
   - RHEL-57947