diff --git a/.gitignore b/.gitignore
index 0068daa..0bdf1af 100644
--- a/.gitignore
+++ b/.gitignore
@@ -14,3 +14,4 @@ bugzilla-3.6.1.tar.gz
 /bugzilla-4.2.2.tar.gz
 /bugzilla-4.2.3.tar.gz
 /bugzilla-4.2.4.tar.gz
+/bugzilla-4.2.5.tar.gz
diff --git a/bugzilla.spec b/bugzilla.spec
index 4a612cd..94b3189 100644
--- a/bugzilla.spec
+++ b/bugzilla.spec
@@ -4,9 +4,9 @@
 Summary: Bug tracking system
 URL: http://www.bugzilla.org/
 Name: bugzilla
-Version: 4.2.4
+Version: 4.2.5
 Group: Applications/Publishing
-Release: 2%{?dist}
+Release: 1%{?dist}
 License: MPLv1.1
 Source0: http://ftp.mozilla.org/pub/mozilla.org/webtools/bugzilla-%{version}.tar.gz
 Source1: bugzilla-httpd-conf
@@ -216,6 +216,9 @@ popd > /dev/null)
 %{bzinstallprefix}/bugzilla/contrib/syncLDAP.pl
 
 %changelog
+* Wed Feb 20 2013 Emmanuel Seyman <emmanuel@seyman.fr> - 4.2.5-1
+- Update to 4.2.5 (fixes CVE-2013-0785)
+
 * Tue Feb 05 2013 Emmanuel Seyman <emmanuel@seyman.fr> - 4.2.4-2
 - Update httpd configuration file for Apache 2.4
 - Update httpd configuration file for the upcoming bugzilla 4.4
diff --git a/sources b/sources
index e12bcb4..9afe565 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-b2cd55bfbc0b42ce16cdec6383cc702e  bugzilla-4.2.4.tar.gz
+070c2d9eee81b2ba621c45d1d3849f66  bugzilla-4.2.5.tar.gz