diff --git a/runc.spec b/runc.spec
index 4c391e5..2d19ec7 100644
--- a/runc.spec
+++ b/runc.spec
@@ -19,8 +19,8 @@ go build -buildmode pie -compiler gc -tags="rpm_crashtraceback libtrust_openssl
 
 Epoch: 4
 Name: %{repo}
-Version: 1.2.4
-Release: 2%{?dist}
+Version: 1.2.5
+Release: 1%{?dist}
 Summary: CLI for running Open Containers
 # https://fedoraproject.org/wiki/PackagingDrafts/Go#Go_Language_Architectures
 #ExclusiveArch: %%{go_arches}
@@ -86,6 +86,10 @@ make install install-man install-bash DESTDIR=$RPM_BUILD_ROOT PREFIX=%{_prefix}
 %{_datadir}/bash-completion/completions/%{name}
 
 %changelog
+* Tue Feb 18 2025 Jindrich Novy <jnovy@redhat.com> - 4:1.2.5-1
+- update to https://github.com/opencontainers/runc/releases/tag/v1.2.5
+- Related: RHEL-60277
+
 * Fri Jan 24 2025 Jindrich Novy <jnovy@redhat.com> - 4:1.2.4-2
 - Implement CPU affinity patch from Kir Kolishkin
 - Related: RHEL-60277
diff --git a/sources b/sources
index 4f5d0e2..33a0d2a 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (v1.2.4.tar.gz) = 2a14bfe7759e0cefcf88fac9d756eb2cbed8a9ebf7b6eacb96855467ea151c278ae0d58735d2a5a2d3335fc54eae4625dfcdb641065df58ba10fd1faafbd3119
+SHA512 (v1.2.5.tar.gz) = 67dd870a24cfe896ead01f156eda6076b14bf287781734c2c4ab0e313d66f49bbf8d51705c5f0c24a604df311439c769a95cbfda12c7fa87ab2e6a31801a6984