diff --git a/libevent-2.0.21-stable.tar.gz b/libevent-2.0.21-stable.tar.gz
deleted file mode 100644
index 21a40d0..0000000
--- a/libevent-2.0.21-stable.tar.gz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:22a530a8a5ba1cb9c080cba033206b17dacd21437762155c6d30ee6469f574f5
-size 850772
diff --git a/libevent-2.0.22-stable.tar.gz b/libevent-2.0.22-stable.tar.gz
new file mode 100644
index 0000000..aef3fde
--- /dev/null
+++ b/libevent-2.0.22-stable.tar.gz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:71c2c49f0adadacfdbe6332a372c38cf9c8b7895bb73dabeaa53cdcc1d4e1fa3
+size 854987
diff --git a/libevent.changes b/libevent.changes
index d109283..80d5e3d 100644
--- a/libevent.changes
+++ b/libevent.changes
@@ -1,3 +1,60 @@
+-------------------------------------------------------------------
+Sun Feb 22 15:47:36 UTC 2015 - benoit.monin@gmx.fr
+
+- update to 2.0.22:
+  * Avoid integer overflow bugs in evbuffer_add() and related
+    functions. See CVE-2014-6272 advisory for more information
+  * fix #73 and fix http_connection_fail_test to catch it
+  * Avoid racy bufferevent activation
+  * Fix compilation with WIN32_HAVE_CONDITION_VARIABLES enabled
+  * Fix missing AC_PROG_SED on older Autoconfs
+  * Backport libevent to vanilla Autoconf 2.59 (as used in RHEL5)
+  * Use AC_CONFIG_HEADERS in place of AM_CONFIG_HEADERS for
+    autmake 1.13 compat
+  * Rename configure.in to configure.ac to appease newer autoconfs
+  * Avoid using top_srcdir in TESTS: new automakes do not like this
+  * Use windows vsnprintf fixup logic on all windows environments
+  * Fix a compiler warning when checking for arc4random_buf linker
+    breakage
+  * Fix another arc4random_buf-related warning
+  * Add -Qunused-arguments for clang on macos
+  * Avoid leaking fds on evconnlistener with no callback set
+  * Avoid double-close on getsockname error in
+    evutil_ersatz_socketpair
+  * Fix a locking error in bufferevent_socket_get_dns_error
+  * libevent/win32_dealloc() : fix sizeof(pointer) vs
+    sizeof(*pointer)
+  * bufferevent_pair: don't call downcast(NULL)
+  * Consistently check for failure from evbuffer_pullup()
+  * Fix race caused by event_active
+  * Avoid redundant invocations of init_extension_functions for
+    IOCP
+  * Typo fixes from Linus Nordberg
+  * Add a few files created by "make verify" to .gitignore
+  * regress_buffer: fix 'memcmp' compare size
+  * Fix bufferevent setwatermark suspend_read
+  * Fix evbuffer_peek() with len==-1 and start_at non-NULL
+  * Checking request nameserver for NULL, before using it
+  * Fix SEGFAULT after evdns_base_resume if no nameservers
+    installed
+  * Fix a crash in evdns related to shutting down evdns
+  * Check does arch have the epoll_create and __NR_epoll_wait
+    syscalls
+  * Avoid other RNG initialization FS reads when urandom file is
+    specified
+  * When we seed from /proc/sys/kernel/random/uuid, count it as
+    success
+  * Document that arc4random is not a great cryptographic PRNG
+  * Add evutil_secure_rng_set_urandom_device_file
+  * Really remove RNG seeds from the stack
+  * Fix a mistake in evbuffer_remove() arguments in example http
+    server code
+  * Fix a typo in a comment in buffer.h
+  * Clarify event_base_loop exit conditions
+  * Use FindClose for handle from FindFirstFile in http-server.c
+  * Fix a typo in a doxygen comment
+- update source URL
+
 -------------------------------------------------------------------
 Sat Jun 29 12:36:28 UTC 2013 - i@marguerite.su
 
diff --git a/libevent.spec b/libevent.spec
index c21ba4d..857574d 100644
--- a/libevent.spec
+++ b/libevent.spec
@@ -1,7 +1,7 @@
 #
 # spec file for package libevent
 #
-# Copyright (c) 2013 SUSE LINUX Products GmbH, Nuernberg, Germany.
+# Copyright (c) 2015 SUSE LINUX GmbH, Nuernberg, Germany.
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -19,13 +19,13 @@
 Name:           libevent
 %define         libsoname %{name}-2_0-5
 
-Version:        2.0.21
+Version:        2.0.22
 Release:        0
 Summary:        An event notification library
 License:        BSD-3-Clause
 Group:          System/Libraries
 Url:            http://libevent.org/
-Source0:        https://github.com/downloads/libevent/libevent/%{name}-%{version}-stable.tar.gz
+Source0:        https://sourceforge.net/projects/levent/files/libevent/libevent-2.0/%{name}-%{version}-stable.tar.gz
 Source1:        baselibs.conf
 BuildRequires:  openssl-devel
 BuildRequires:  pkg-config