diff --git a/.expat.metadata b/.expat.metadata
index c53b06e..899cf1d 100644
--- a/.expat.metadata
+++ b/.expat.metadata
@@ -1 +1 @@
-d167305ef621c3633a7e2c207fd45bad5653487d SOURCES/expat-2.4.7.tar.gz
+03d9882ede56aa48919fbf50fe17614630257a82 SOURCES/expat-2.5.0.tar.gz
diff --git a/.gitignore b/.gitignore
index 65dd43a..85adc91 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1 +1 @@
-SOURCES/expat-2.4.7.tar.gz
+SOURCES/expat-2.5.0.tar.gz
diff --git a/SPECS/expat.spec b/SPECS/expat.spec
index 634e9b0..db2a285 100644
--- a/SPECS/expat.spec
+++ b/SPECS/expat.spec
@@ -1,4 +1,4 @@
-%global unversion 2_4_7
+%global unversion 2_5_0
 
 Summary: An XML parser library
 Name: expat
@@ -74,6 +74,14 @@ make check
 %{_libdir}/lib*.a
 
 %changelog
+* Thu Nov 10 2022 Tomas Korbar <tkorbar@redhat.com> - 2.5.0-1
+- Rebase to version 2.5.0
+- Resolves: CVE-2022-43680
+
+* Thu Sep 29 2022 Tomas Korbar <tkorbar@redhat.com> - 2.4.9-1
+- Rebase to version 2.4.9
+- Resolves: CVE-2022-40674
+
 * Tue Apr 26 2022 Tomas Korbar <tkorbar@redhat.com> -  2.4.7-1
 - Rebase to version 2.4.7
 - Resolves: rhbz#2067201