diff --git a/.gitignore b/.gitignore
index 1134908..2666340 100644
--- a/.gitignore
+++ b/.gitignore
@@ -68,3 +68,5 @@
 /ldb-2.5.0.tar.gz
 /ldb-2.5.1.tar.asc
 /ldb-2.5.1.tar.gz
+/ldb-2.5.2.tar.asc
+/ldb-2.5.2.tar.gz
diff --git a/libldb.spec b/libldb.spec
index 0bcc750..fb7aa12 100644
--- a/libldb.spec
+++ b/libldb.spec
@@ -24,7 +24,7 @@
 %global tevent_version 0.11.0
 
 Name: libldb
-Version: 2.5.1
+Version: 2.5.2
 Release: 1%{?dist}
 Summary: A schema-less, ldap like, API and database
 Requires: libtalloc%{?_isa} >= %{talloc_version}
@@ -222,6 +222,10 @@ rm -f $RPM_BUILD_ROOT/%{_mandir}/man3/_*
 %endif
 
 %changelog
+* Wed Jul 27 2022 Andreas Schneider <asn@redhat.com> - 2.5.2-1
+- Rebase to version 2.5.2
+- resolves: rhbz#2109017 - Fix CVE-2022-32746
+
 * Mon Jun 13 2022 Pavel Filipenský <pfilipen@redhat.com> - 2.5.1-1
 - related: rhbz#2077490 - Rebase to version 2.5.1
 
diff --git a/sources b/sources
index db20f16..d809a92 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
-SHA512 (ldb-2.5.1.tar.asc) = aafa70655013896a0e5dcd6863d000dade964d5f97d6e5f5d3c374df54e1e3c32bae4296485d4db170ee6dd1aafe10574135d7922afc90371fe13ff93fe936bb
-SHA512 (ldb-2.5.1.tar.gz) = 679ad695d4467a38e6cb87ba2b7d61049a42c59792b39f0a40256456ac673849adf58dc0759a89be982b80bb4a0834d34b51779424f7b997a53ea95f02f410ad
+SHA512 (ldb-2.5.2.tar.asc) = 01d8e8825476d7c262273fa448205bebd160082dc8ac102d8c515a784166fe21a1d84a5f8b989356c6efffcefee3fa2c3d617a51d841ca0103b97c55a272c2d3
+SHA512 (ldb-2.5.2.tar.gz) = 02ae1246f99d9b6d6b33c5030488aa46c6abb535b4da4b13799a62b49d32c490b7c088ef41c0bc5a1b2f7263c680faceb8033827834cb6f66916adcdb5be421c