diff --git a/.gitignore b/.gitignore
index 99ffa46..61ef541 100644
--- a/.gitignore
+++ b/.gitignore
@@ -104,3 +104,4 @@
 /389-ds-base-1.3.2.22.tar.bz2
 /389-ds-base-1.3.2.23.tar.bz2
 /389-ds-base-1.3.2.24.tar.bz2
+/389-ds-base-1.3.2.25.tar.bz2
diff --git a/389-ds-base.spec b/389-ds-base.spec
index 56ed8be..ca4cb00 100644
--- a/389-ds-base.spec
+++ b/389-ds-base.spec
@@ -24,7 +24,7 @@
 
 Summary:          389 Directory Server (base)
 Name:             389-ds-base
-Version:          1.3.2.24
+Version:          1.3.2.25
 Release:          %{?relprefix}1%{?prerel}%{?dist}
 License:          GPLv2 with exceptions
 URL:              http://port389.org/
@@ -316,6 +316,44 @@ fi
 %{_libdir}/%{pkgname}/libns-dshttpd.so*
 
 %changelog
+* Wed Jan 28 2015 Noriko Hosoi <nhosoi@redhat.com> - 1.3.2.25-1
+- Bump version to 1.3.2.25
+- Ticket 47996 - ldclt needs to support SSL Version range
+- Ticket 47991 - upgrade script fails if /etc and /var are on different file systems
+- Ticket 47989 - Windows Sync accidentally cleared raw_entry
+- Ticket 47964 - v2 - Incorrect search result after replacing an empty attribute
+- Ticket 47934 - nsslapd-db-locks modify not taking into account.
+- Ticket 47617 - replication changelog trimming setting validation
+- Ticket 47905 - Bad manipulation of passwordhistory
+- Ticket 47973 - During schema reload sometimes the search returns no results
+- Ticket 47659 - ldbm_usn_init: Valgrind reports Invalid read / SIGSEGV
+- Ticket 47880 - provide enabled ciphers as search result
+- Ticket 47945 - Add SSL/TLS version info to the access log
+- Ticket 47928 - Disable SSL v3, by default [389-ds-base-1.2.11 only]
+- Ticket 47949 - logconv.pl -- support parsing/showing/reporting different protocol versions
+- Ticket 47981 - COS cache doesn't properly mark vattr cache as  invalid when there are multiple suffixes
+- Ticket 47980 - Nested COS definitions can be incorrectly  processed
+- Ticket 47750 - During delete operation do not refresh cache entry if it is a tombstone
+- Ticket 47965 - Fix coverity issues (2014/12/16)
+- Ticket 47935 - Error: failed to open an LDAP connection to host 'example.org' port '389' as user 'cn=Directory Manager'. Error: unknown.
+- Ticket 47750 - Need to refresh cache entry after called betxn postop plugins
+- Ticket 47942: DS hangs during online total update
+- Ticket 47722 - Using the filter file does not work
+- Ticket 47965 - Fix coverity issues (2014/11/24)
+- Ticket 47969 - Fix coverity issue
+- Ticket 47970 - add lib389 testcase
+- Ticket 47970 - Account lockout attributes incorrectly updated after failed SASL Bind
+- Ticket 47969 - COS memory leak when rebuilding the cache
+- Ticket 47967 - cos_cache_build_definition_list does not stop during server shutdown
+- Ticket 47963 - skip nested groups breaks memberof fixup task
+- Ticket 47963 - RFE - memberOf - add option to skip nested  group lookups during delete operations
+- Ticket 47950 - Bind DN tracking unable to write to internalModifiersName without special permissions
+- Ticket 47958 - Memory leak in password admin if the admin entry does not exist
+- Ticket 47952 - PasswordAdminDN attribute is not properly returned to client
+- Ticket 47953 - Should not check aci syntax when deleting an aci
+- Ticket 47948 - ldap_sasl_bind fails assertion (ld != NULL) if it is called from chainingdb_bind over SSL/startTLS
+- Ticket 47937 - Crash in entry_add_present_values_wsi_multi_valued
+
 * Fri Oct 10 2014 Noriko Hosoi <nhosoi@redhat.com> - 1.3.2.24-1
 - Release 1.3.2.24
 - Ticket 47922 - dynamically added macro aci is not evaluated on the fly
diff --git a/sources b/sources
index 43f0ae4..00954b9 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-cd0ca9e6bd7981863f7df63ef15bb3e4  389-ds-base-1.3.2.24.tar.bz2
+0d4c32f824a096a001b7925db1517900  389-ds-base-1.3.2.25.tar.bz2