diff --git a/_service b/_service
index 7f669f4..7ee02e3 100644
--- a/_service
+++ b/_service
@@ -3,8 +3,8 @@
     <param name="url">https://github.com/containerd/containerd.git</param>
     <param name="scm">git</param>
     <param name="filename">containerd</param>
-    <param name="versionformat">1.4.11_%h</param>
-    <param name="revision">v1.4.11</param>
+    <param name="versionformat">1.4.12_%h</param>
+    <param name="revision">v1.4.12</param>
     <param name="exclude">.git</param>
   </service>
   <service name="recompress" mode="disabled">
diff --git a/containerd-1.4.11_5b46e404f6b9.tar.xz b/containerd-1.4.11_5b46e404f6b9.tar.xz
deleted file mode 100644
index 4cbab67..0000000
--- a/containerd-1.4.11_5b46e404f6b9.tar.xz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:7fc630f65ea032045f2b8e09449163f4f75bb6aaefa17ababeee3a5007a99227
-size 3698480
diff --git a/containerd-1.4.12_7b11cfaabd73.tar.xz b/containerd-1.4.12_7b11cfaabd73.tar.xz
new file mode 100644
index 0000000..7dd3fdb
--- /dev/null
+++ b/containerd-1.4.12_7b11cfaabd73.tar.xz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:184a3b3723d319bed0e8051361e911440ce01ac488c41fa44acab4fb4ef3d5b1
+size 3698852
diff --git a/containerd.changes b/containerd.changes
index 3fa0ca6..4578265 100644
--- a/containerd.changes
+++ b/containerd.changes
@@ -1,3 +1,15 @@
+-------------------------------------------------------------------
+Fri Nov 19 00:01:23 UTC 2021 - Aleksa Sarai <asarai@suse.com>
+
+- Update to containerd v1.4.12 for Docker 20.10.11-ce.
+  bsc#1192814 CVE-2021-41190
+
+-------------------------------------------------------------------
+Wed Oct  6 02:54:49 UTC 2021 - Aleksa Sarai <asarai@suse.com>
+
+- Update to containerd v1.4.11, to fix CVE-2021-41103. bsc#1191355
+- Switch to Go 1.16.x compiler, in line with upstream.
+
 -------------------------------------------------------------------
 Wed Oct  6 02:54:49 UTC 2021 - Aleksa Sarai <asarai@suse.com>
 
diff --git a/containerd.spec b/containerd.spec
index 6e2ef78..8e2ff43 100644
--- a/containerd.spec
+++ b/containerd.spec
@@ -23,11 +23,11 @@
 %endif
 
 # MANUAL: Update the git_version.
-%define git_version 5b46e404f6b9f661a205e28d59c982d3634148f8
-%define git_short   5b46e404f6b9
+%define git_version 7b11cfaabd73bb80907dd23182b9347b4245eb5d
+%define git_short   7b11cfaabd73
 
 Name:           containerd
-Version:        1.4.11
+Version:        1.4.12
 Release:        0
 Summary:        Standalone OCI Container Daemon
 License:        Apache-2.0