diff --git a/.cvsignore b/.cvsignore
index 35cba03..fa080ed 100644
--- a/.cvsignore
+++ b/.cvsignore
@@ -1 +1 @@
-wireshark-1.2.4.tar.bz2
+wireshark-1.2.5.tar.bz2
diff --git a/sources b/sources
index 5524050..f14b749 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-ae4533da7d0e54c236e1eed966c42163  wireshark-1.2.4.tar.bz2
+38010265a76f25553498304dcf15a92c  wireshark-1.2.5.tar.bz2
diff --git a/wireshark.spec b/wireshark.spec
index 506180d..4197c11 100644
--- a/wireshark.spec
+++ b/wireshark.spec
@@ -11,8 +11,8 @@
 
 Summary: 	Network traffic analyzer
 Name: 		wireshark
-Version:	1.2.4
-Release: 	3%{?dist}
+Version:	1.2.5
+Release: 	1%{?dist}
 License: 	GPL+
 Group: 		Applications/Internet
 %if %{svn_version}
@@ -300,6 +300,10 @@ rm -rf $RPM_BUILD_ROOT
 %endif
 
 %changelog
+* Fri Dec 18 2009 Radek Vokal <rvokal@redhat.com> - 1.2.5-1
+- upgrade to 1.2.5
+- fixes security vulnaribilities, see http://www.wireshark.org/security/wnpa-sec-2009-09.html 
+
 * Thu Dec 17 2009 Radek Vokal <rvokal@redhat.com> - 1.2.4-3
 - split -devel package (#547899, #203642, #218451)
 - removing root warning dialog (#543709)