diff --git a/helmfile.changes b/helmfile.changes
index 0750a99..78e9ab3 100644
--- a/helmfile.changes
+++ b/helmfile.changes
@@ -1,3 +1,8 @@
+-------------------------------------------------------------------
+Thu Feb  9 09:53:40 UTC 2023 - Manfred Hollstein <manfred.h@gmx.net>
+
+- CVE-2023-25165: Require helm >= 3.11.1
+
 -------------------------------------------------------------------
 Mon Jan 23 17:02:57 UTC 2023 - Manfred Hollstein <manfred.h@gmx.net>
 
diff --git a/helmfile.spec b/helmfile.spec
index 5f1224f..6086176 100644
--- a/helmfile.spec
+++ b/helmfile.spec
@@ -27,7 +27,7 @@ Group:          Development/Languages/Other
 URL:            https://github.com/helmfile/helmfile
 Source:         %{name}-%{version}.tar.gz
 Source1:        vendor.tar.gz
-Requires:       helm
+Requires:       helm >= 3.11.1
 BuildRequires:  golang-packaging
 BuildRequires:  xz
 BuildRequires:  golang(API) >= 1.19