diff --git a/go1.22.3.src.tar.gz b/go1.22.3.src.tar.gz
deleted file mode 100644
index 4527541..0000000
--- a/go1.22.3.src.tar.gz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:80648ef34f903193d72a59c0dff019f5f98ae0c9aa13ade0b0ecbff991a76f68
-size 27552410
diff --git a/go1.22.5.src.tar.gz b/go1.22.5.src.tar.gz
new file mode 100644
index 0000000..24051bb
--- /dev/null
+++ b/go1.22.5.src.tar.gz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:ac9c723f224969aee624bc34fd34c9e13f2a212d75c71c807de644bb46e112f6
+size 27559458
diff --git a/go1.22.changes b/go1.22.changes
index 7a224a3..2fbca44 100644
--- a/go1.22.changes
+++ b/go1.22.changes
@@ -1,3 +1,49 @@
+-------------------------------------------------------------------
+Tue Jul  2 18:51:45 UTC 2024 - Jeff Kowalczyk <jkowalczyk@suse.com>
+
+- go1.22.5 (released 2024-07-02) includes security fixes to the
+  net/http package, as well as bug fixes to the compiler, cgo, the
+  go command, the linker, the runtime, and the crypto/tls,
+  go/types, net, net/http, and os/exec packages.
+  Refs boo#1218424 go1.22 release tracking
+  CVE-2024-24791
+  * go#68200 go#67555 boo#1227314 security: fix CVE CVE-2024-24791 net/http: expect: 100-continue handling is broken in various ways
+  * go#65983 cmd/compile: hash of unhashable type
+  * go#65994 crypto/tls: segfault when calling tlsrsakex.IncNonDefault()
+  * go#66598 os/exec: calling Cmd.Start after setting Cmd.Path manually to absolute path without ".exe" no longer implicitly adds ".exe" in Go 1.22
+  * go#67298 runtime: "fatal: morestack on g0" on amd64 after upgrade to Go 1.21, stale bounds
+  * go#67715 cmd/cgo/internal/swig,cmd/go,x/build: swig cgo tests incompatible with C++ toolchain on builders
+  * go#67798 cmd/compile: internal compiler error: unexpected type: <nil> (<nil>) in for-range
+  * go#67820 cmd/compile: package-level variable initialization with constant dependencies doesn't match order specified in Go spec
+  * go#67850 go/internal/gccgoimporter: go building failing with gcc 14.1.0
+  * go#67934 net: go DNS resolver fails to connect to local DNS server
+  * go#67945 cmd/link: using -fuzz with test that links with cgo on darwin causes linker failure
+  * go#68052 cmd/go: go list -u -m all fails loading module retractions: module requires go >= 1.N+1 (running go 1.N)
+  * go#68122 cmd/link: runtime.mach_vm_region_trampoline: unsupported dynamic relocation for symbol libc_mach_task_self_ (type=29 (R_GOTPCREL) stype=46 (SDYNIMPORT))
+
+-------------------------------------------------------------------
+Tue Jun  4 18:08:59 UTC 2024 - Jeff Kowalczyk <jkowalczyk@suse.com>
+
+- go1.22.4 (released 2024-06-04) includes security fixes to the
+  archive/zip and net/netip packages, as well as bug fixes to the
+  compiler, the go command, the linker, the runtime, and the os
+  package.
+  Refs boo#1218424 go1.22 release tracking
+  CVE-2024-24789 CVE-2024-24790
+  * go#67554 go#66869 boo#1225973 security: fix CVE-2024-24789 archive/zip: EOCDR comment length handling is inconsistent with other ZIP implementations
+  * go#67682 go#67680 boo#1225974 security: fix CVE-2024-24790 net/netip: unexpected behavior from Is methods for IPv4-mapped IPv6 addresses
+  * go#67188 runtime/metrics: /memory/classes/heap/unused:bytes spikes
+  * go#67212 cmd/compile: SIGBUS unaligned access on mips64 via qemu-mips64
+  * go#67236 cmd/go: mod tidy reports toolchain not available with 'go 1.21'
+  * go#67258 runtime: unexpected fault address 0
+  * go#67311 cmd/go: TestScript/gotoolchain_issue66175 fails on tip locally
+  * go#67314 cmd/go,cmd/link: TestScript/build_issue48319 and TestScript/build_plugin_reproducible failing on LUCI gotip-darwin-amd64-longtest builder due to non-reproducible LC_UUID
+  * go#67352 crypto/x509: TestPlatformVerifier failures on Windows due to broken connections
+  * go#67460 cmd/compile: internal compiler error: panic with range over integer value
+  * go#67527 cmd/link: panic: machorelocsect: size mismatch
+  * go#67650 runtime: SIGSEGV after performing clone(CLONE_PARENT) via C constructor prior to runtime start
+  * go#67696 os: RemoveAll susceptible to symlink race
+
 -------------------------------------------------------------------
 Tue May  7 16:00:41 UTC 2024 - Jeff Kowalczyk <jkowalczyk@suse.com>
 
diff --git a/go1.22.spec b/go1.22.spec
index 043dbfa..18ca93c 100644
--- a/go1.22.spec
+++ b/go1.22.spec
@@ -122,7 +122,7 @@
 %endif
 
 Name:           go1.22
-Version:        1.22.3
+Version:        1.22.5
 Release:        0
 Summary:        A compiled, garbage-collected, concurrent programming language
 License:        BSD-3-Clause