diff --git a/.gitignore b/.gitignore
index 6e4b5f5..f5162eb 100644
--- a/.gitignore
+++ b/.gitignore
@@ -20,3 +20,4 @@ expat-2.0.1.tar.gz
 /expat-2.2.10.tar.gz
 /expat-2.4.7.tar.gz
 /expat-2.4.9.tar.gz
+/expat-2.5.0.tar.gz
diff --git a/expat.spec b/expat.spec
index cc03718..db2a285 100644
--- a/expat.spec
+++ b/expat.spec
@@ -1,4 +1,4 @@
-%global unversion 2_4_9
+%global unversion 2_5_0
 
 Summary: An XML parser library
 Name: expat
@@ -74,6 +74,10 @@ make check
 %{_libdir}/lib*.a
 
 %changelog
+* Thu Nov 10 2022 Tomas Korbar <tkorbar@redhat.com> - 2.5.0-1
+- Rebase to version 2.5.0
+- Resolves: CVE-2022-43680
+
 * Thu Sep 29 2022 Tomas Korbar <tkorbar@redhat.com> - 2.4.9-1
 - Rebase to version 2.4.9
 - Resolves: CVE-2022-40674
diff --git a/sources b/sources
index c9bb29a..30d98c8 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (expat-2.4.9.tar.gz) = 6bf92516ce2642b2cdcbc586aaac0f706f125394fa428670f9b8b042a1f393e3b9dda1a24e58e6c8ad8b4ff3303cb5a8700628c6c04a881a06251c08be3759d3
+SHA512 (expat-2.5.0.tar.gz) = 779f0d0f3f2d8b33db0fd044864ab5ab1a40f20501f792fe90ad0d18de536c4765c3749f120e21fec11a0e6c89af1dc576d1fe261c871ca44a594f7b61fd1d9e