diff --git a/.gitignore b/.gitignore
index 8fa00dd..3761f05 100644
--- a/.gitignore
+++ b/.gitignore
@@ -22,3 +22,4 @@ SOURCES/osbuild-composer-75.tar.gz
 /osbuild-composer-100.tar.gz
 /osbuild-composer-101.tar.gz
 /osbuild-composer-101.4.tar.gz
+/osbuild-composer-101.5.tar.gz
diff --git a/osbuild-composer.spec b/osbuild-composer.spec
index fa8bd21..af91441 100644
--- a/osbuild-composer.spec
+++ b/osbuild-composer.spec
@@ -12,7 +12,7 @@
 
 %global goipath         github.com/osbuild/osbuild-composer
 
-Version:        101.4
+Version:        101.5
 
 %gometa
 
@@ -25,7 +25,7 @@ It is compatible with composer-cli and cockpit-composer clients.
 }
 
 Name:           osbuild-composer
-Release:        6%{?dist}
+Release:        1%{?dist}
 Summary:        An image building service based on osbuild
 
 # osbuild-composer doesn't have support for building i686 and armv7hl images
@@ -421,6 +421,19 @@ Integration tests to be run on a pristine-dedicated system to test the osbuild-c
 %endif
 
 %changelog
+* Thu Jul 15 2026 avitova <avitova@redhat.com> - 101.5
+- Resolves:
+  - CVE-2026-33186
+  - CVE-2026-34986
+  - CVE-2026-32282
+  - CVE-2026-32280
+  - CVE-2026-32283
+  - RHEL-160757
+  - RHEL-164977
+  - RHEL-166522
+  - RHEL-167382
+  - RHEL-167544
+
 * Wed Apr 15 2026 imagebuilder-bot <imagebuilder-bots+imagebuilder-bot@redhat.com> - 101.4-6
 - Rebuilt to fix: 
   - CVE-2026-25679
diff --git a/sources b/sources
index 8eb9145..3dd83f3 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (osbuild-composer-101.4.tar.gz) = 8c76c27b63cb8242c334537033ae36d53a8b2d4bcffd8d844850f217a1176200d4ecd820ebf70b4f6995ce0db43e818a95759aab1edd7b1b1c3f5323a1c2ec90
+SHA512 (osbuild-composer-101.5.tar.gz) = d7d4138984275f9f593cb24785fc0ba4735aeb0b7e8fd7b8d56a1cbb0dade74c1beaa755ae6ea162f2ac0ca292809cf737dab530a0b00556d66687beb64eb4a9