diff --git a/docker.changes b/docker.changes
index 584012e..bb05463 100644
--- a/docker.changes
+++ b/docker.changes
@@ -1,3 +1,19 @@
+-------------------------------------------------------------------
+Fri Jan 11 09:57:32 UTC 2019 - Sascha Grunert <sgrunert@suse.com>
+
+- Disable leap based builds for kubic flavor. bsc#1121412
+
+-------------------------------------------------------------------
+Wed Dec 19 19:28:47 UTC 2018 - clee@suse.com
+
+- Update go requirements to >= go1.10.6 to fix
+  * bsc#1118897 CVE-2018-16873
+    go#29230 cmd/go: remote command execution during "go get -u"
+  * bsc#1118898 CVE-2018-16874
+    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
+  * bsc#1118899 CVE-2018-16875
+    go#29233 crypto/x509: CPU denial of service
+
 -------------------------------------------------------------------
 Tue Dec 18 10:10:06 UTC 2018 - Aleksa Sarai <asarai@suse.com>
 
@@ -19,7 +35,7 @@ Thu Nov 29 09:41:11 UTC 2018 - Aleksa Sarai <asarai@suse.com>
 - Update docker.service to match upstream and avoid rlimit problems.
   bsc#1112980
 - Upgrade to Docker 18.09.0-ce. See upstream changelog in the packaged
-  /usr/share/doc/packages/docker/CHANGELOG.md. boo#1115464
+  /usr/share/doc/packages/docker/CHANGELOG.md. boo#1115464 bsc#1118990
 - Add revert of an upstream patch to fix docker-* handling.
   + packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
 - Rebase patches:
@@ -3311,5 +3327,3 @@ Wed Apr 10 10:31:11 UTC 2013 - fcastelli@suse.com
 Tue Apr  9 08:24:33 UTC 2013 - fcastelli@suse.com
 
 - create initial package using version 0.1.3 from git commit 0767916adedb01
-
-
diff --git a/docker.spec b/docker.spec
index 9ce6b2f..1528765 100644
--- a/docker.spec
+++ b/docker.spec
@@ -1,7 +1,7 @@
 #
 # spec file for package docker
 #
-# Copyright (c) 2018 SUSE LINUX GmbH, Nuernberg, Germany.
+# Copyright (c) 2019 SUSE LINUX GmbH, Nuernberg, Germany.
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -158,6 +158,10 @@ Provides:       %{realname} = %{version}
 Provides:       cri-runtime
 # No i586 Kubernetes, so docker-kubic must not be built for i586 also
 ExcludeArch:    i586
+# Disable leap based builds for kubic flavor (bsc#1121412)
+%if 0%{?suse_version} == 1500 && 0%{?is_opensuse}
+ExclusiveArch:  do_not_build
+%endif
 %endif
 
 %description