diff --git a/Flask-2.2.2.tar.gz b/Flask-2.2.2.tar.gz
deleted file mode 100644
index ac84121..0000000
--- a/Flask-2.2.2.tar.gz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:642c450d19c4ad482f96729bd2a8f6d32554aa1e231f4f6b4e7e5264b16cca2b
-size 677389
diff --git a/Flask-2.2.5.tar.gz b/Flask-2.2.5.tar.gz
new file mode 100644
index 0000000..c7aca45
--- /dev/null
+++ b/Flask-2.2.5.tar.gz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:edee9b0a7ff26621bd5a8c10ff484ae28737a2410d99b0bb9a6850c7fb977aa0
+size 697814
diff --git a/python-Flask.changes b/python-Flask.changes
index f818ff2..17380aa 100644
--- a/python-Flask.changes
+++ b/python-Flask.changes
@@ -1,3 +1,17 @@
+-------------------------------------------------------------------
+Wed May 10 09:15:55 UTC 2023 - Dirk Müller <dmueller@suse.com>
+
+- update to 2.2.5 (bsc#1211246, CVE-2023-30861):
+  * Set ``Vary: Cookie`` header when the session is accessed,
+    modified, or refreshed.
+  * Update for compatibility with Werkzeug 2.3.
+  * Autoescape is enabled by default for ``.svg`` template
+    files. :issue:`4831`
+  * Fix the type of ``template_folder`` to accept
+    ``pathlib.Path``. :issue:`4892`
+  * Add ``--debug`` option to the ``flask run`` command.
+    :issue:`4777`
+
 -------------------------------------------------------------------
 Fri Apr 21 12:20:33 UTC 2023 - Dirk Müller <dmueller@suse.com>
 
diff --git a/python-Flask.spec b/python-Flask.spec
index 16a9dfb..3e7a873 100644
--- a/python-Flask.spec
+++ b/python-Flask.spec
@@ -27,7 +27,7 @@
 %define skip_python36 1
 %{?sle15_python_module_pythons}
 Name:           python-Flask
-Version:        2.2.2
+Version:        2.2.5
 Release:        0
 Summary:        A microframework based on Werkzeug, Jinja2 and good intentions
 License:        BSD-3-Clause