diff --git a/skopeo.spec b/skopeo.spec
index 54d0de6..ab68f12 100644
--- a/skopeo.spec
+++ b/skopeo.spec
@@ -16,7 +16,7 @@ go build -buildmode pie -compiler gc -tags="rpm_crashtraceback libtrust_openssl
 Epoch: 2
 Name: skopeo
 Version: 1.14.6
-Release: 2%{?dist}
+Release: 3%{?dist}
 Summary: Inspect container images and repositories on registries
 License: ASL 2.0
 URL: https://%{import_path}
@@ -122,6 +122,10 @@ export GOPATH=%{buildroot}/%{gopath}:$(pwd)/vendor:%{gopath}
 %{_datadir}/%{name}/test
 
 %changelog
+* Thu Aug 20 2026 Jindrich Novy <jnovy@redhat.com> - 2:1.14.6-3
+- rebuild with Go 1.25.11 to fix CVE-2026-33818, CVE-2026-56853, CVE-2026-56858,
+  CVE-2026-56859, CVE-2026-56860, CVE-2026-56862
+
 * Wed May 20 2026 Jindrich Novy <jnovy@redhat.com> - 2:1.14.6-2
 - Rebuild for CVE-2026-32281
 - Resolves: RHEL-177067