diff --git a/_service b/_service
index 204d00e..807336e 100644
--- a/_service
+++ b/_service
@@ -2,7 +2,7 @@
   <service name="tar_scm" mode="manual">
     <param name="url">https://github.com/rancherfederal/hauler</param>
     <param name="scm">git</param>
-    <param name="revision">v1.4.0</param>
+    <param name="revision">v1.4.1</param>
     <param name="versionformat">@PARENT_TAG@</param>
     <param name="versionrewrite-pattern">v(.*)</param>
     <param name="changesgenerate">enable</param>
diff --git a/_servicedata b/_servicedata
index 07a0e9c..6ed6795 100644
--- a/_servicedata
+++ b/_servicedata
@@ -1,4 +1,4 @@
 <servicedata>
 <service name="tar_scm">
                 <param name="url">https://github.com/rancherfederal/hauler</param>
-              <param name="changesrevision">ac7d82b55fb2d2e22e8f76b06312d68815ffa109</param></service></servicedata>
\ No newline at end of file
+              <param name="changesrevision">4a2b7b13a7a3e3dab926893c0be1a67dea6d8457</param></service></servicedata>
\ No newline at end of file
diff --git a/hauler-1.4.0.tar.zst b/hauler-1.4.0.tar.zst
deleted file mode 100644
index 993d4d7..0000000
--- a/hauler-1.4.0.tar.zst
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:0a361f74710ffb6753dd2eaaff8d8375e4606d57a0cfdc59491b8677985617ef
-size 25658546
diff --git a/hauler-1.4.1.tar.zst b/hauler-1.4.1.tar.zst
new file mode 100644
index 0000000..2bddefc
--- /dev/null
+++ b/hauler-1.4.1.tar.zst
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:b46056b6a9777cf944a513a10efecca8f6737a103f41126abca8828a798b3bf2
+size 25658690
diff --git a/hauler.changes b/hauler.changes
index 2579f5d..38aea74 100644
--- a/hauler.changes
+++ b/hauler.changes
@@ -1,3 +1,11 @@
+-------------------------------------------------------------------
+Mon Jan 19 12:38:03 UTC 2026 - Dirk Müller <dmueller@suse.com>
+
+- Update to version 1.4.1 (bsc#1256546, CVE-2026-22772):
+  * fixed typos for containerd imports (#493)
+  * fix and support containerd imports of `hauls` (#492)
+  * bump github.com/sigstore/fulcio (#489)
+
 -------------------------------------------------------------------
 Tue Jan 13 13:57:02 UTC 2026 - Dirk Müller <dmueller@suse.com>
 
diff --git a/hauler.spec b/hauler.spec
index 89ce9f4..5e6695a 100644
--- a/hauler.spec
+++ b/hauler.spec
@@ -17,8 +17,8 @@
 
 
 Name:           hauler
-Version:        1.4.0
-%global git_commit 5edc8802eec20adc7d0b75847f77446d6f531012
+Version:        1.4.1
+%global git_commit 4a2b7b13a7a3e3dab926893c0be1a67dea6d8457
 Release:        0
 Summary:        Airgap Swiss Army Knife
 License:        Apache-2.0
diff --git a/vendor.tar.zst b/vendor.tar.zst
index 498c813..47949d2 100644
--- a/vendor.tar.zst
+++ b/vendor.tar.zst
@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:c3b4d993ca1811a137222d919f0076df5ed9e9d48bcf349bf5d874278f6af0dc
-size 13206649
+oid sha256:65d6784cd1b742c9fae72adcf8827ee4c27f52fddce4991366d11d8f901b1dc4
+size 13217912