diff --git a/webkit2gtk3.changes b/webkit2gtk3.changes
index e73a955..d1a416a 100644
--- a/webkit2gtk3.changes
+++ b/webkit2gtk3.changes
@@ -1,3 +1,15 @@
+-------------------------------------------------------------------
+Mon Dec 17 10:12:07 UTC 2018 - bjorn.lie@gmail.com
+
+- Update to version 2.22.5:
+  + Improved the logic to determine for which architectures to
+    enable the JIT compiler support and USE_SYSTEM_MALLOC at build
+    time.
+  + Fix the build with ENABLE_VIDEO=OFF and ENABLE_OPENGL=OFF.
+  + Fix several crashes.
+  + Security fixes: CVE-2018-4437, CVE-2018-4438, CVE-2018-4441,
+    CVE-2018-4442, CVE-2018-4443, CVE-2018-4464.
+
 -------------------------------------------------------------------
 Fri Dec  7 22:34:19 UTC 2018 - mgorse@suse.com
 
@@ -79,12 +91,17 @@ Wed Sep 26 15:19:42 UTC 2018 - bjorn.lie@gmail.com
 -------------------------------------------------------------------
 Tue Sep  4 10:18:37 UTC 2018 - bjorn.lie@gmail.com
 
-- Update to version 2.22.0:
+- Update to version 2.22.0 (boo#1110279):
   + New JavaScriptCore GLib API.
   + Switched to use complex text code path unconditionally.
   + Added playbin3 support to GStreamer media backend.
   + Support for WebDriver advance user insteraction commands.
   + Default option menu implementation now uses a GtkTreeView.
+  + Security fixes: CVE-2018-4191, CVE-2018-4197, CVE-2018-4299,
+    CVE-2018-4306, CVE-2018-4309, CVE-2018-4312, CVE-2018-4314,
+    CVE-2018-4315, CVE-2018-4316, CVE-2018-4317, CVE-2018-4318,
+    CVE-2018-4319, CVE-2018-4323, CVE-2018-4328, CVE-2018-4358,
+    CVE-2018-4359, CVE-2018-4361.
 
 -------------------------------------------------------------------
 Fri Aug 24 11:28:26 UTC 2018 - bjorn.lie@gmail.com
@@ -325,7 +342,9 @@ Mon Mar 12 16:18:01 UTC 2018 - dimstar@opensuse.org
     CVE-2018-4120, CVE-2018-4122, CVE-2018-4125,
     CVE-2018-4127, CVE-2018-4128, CVE-2018-4129,
     CVE-2018-4133, CVE-2018-4146, CVE-2018-4161,
-    CVE-2018-4162, CVE-2018-4163, CVE-2018-4165, CVE-2018-11713.
+    CVE-2018-4162, CVE-2018-4163, CVE-2018-4165, CVE-2018-11713,
+    CVE-2018-4207, CVE-2018-4208, CVE-2018-4209, CVE-2018-4210,
+    CVE-2018-4212, CVE-2018-4213.
 
 -------------------------------------------------------------------
 Tue Mar  6 21:49:48 UTC 2018 - mgorse@suse.com
diff --git a/webkit2gtk3.spec b/webkit2gtk3.spec
index fe3150d..5e29919 100644
--- a/webkit2gtk3.spec
+++ b/webkit2gtk3.spec
@@ -42,7 +42,7 @@
 %bcond_with python3
 %endif
 Name:           webkit2gtk3
-Version:        2.22.4
+Version:        2.22.5
 Release:        0
 Summary:        Library for rendering web content, GTK+ Port
 License:        LGPL-2.0-or-later AND BSD-3-Clause
diff --git a/webkitgtk-2.22.4.tar.xz b/webkitgtk-2.22.4.tar.xz
deleted file mode 100644
index 95bf748..0000000
--- a/webkitgtk-2.22.4.tar.xz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:fab5be2883802352ae0e735dd1eff4bc18abaff7ac78689cec72eb2f611943b8
-size 16752132
diff --git a/webkitgtk-2.22.4.tar.xz.asc b/webkitgtk-2.22.4.tar.xz.asc
deleted file mode 100644
index 3f40e6f..0000000
--- a/webkitgtk-2.22.4.tar.xz.asc
+++ /dev/null
@@ -1,6 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iF0EABECAB0WIQRao7wzT9fjNp58d7KRxVnb5MkSOwUCW/WqDAAKCRCRxVnb5MkS
-O9mGAJ9Lbo4Flf4Fhwlz88xEZxm23terBwCfSxzdRxGeD5MqNZgihxcVBYtC0z0=
-=4nl2
------END PGP SIGNATURE-----
diff --git a/webkitgtk-2.22.5.tar.xz b/webkitgtk-2.22.5.tar.xz
new file mode 100644
index 0000000..7dd1c18
--- /dev/null
+++ b/webkitgtk-2.22.5.tar.xz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:99d3863f418a7c3a3e37e5062950dbf2d91fb106ec1633459b0ef6f2d5f6cb13
+size 16774560
diff --git a/webkitgtk-2.22.5.tar.xz.asc b/webkitgtk-2.22.5.tar.xz.asc
new file mode 100644
index 0000000..09f1fa2
--- /dev/null
+++ b/webkitgtk-2.22.5.tar.xz.asc
@@ -0,0 +1,6 @@
+-----BEGIN PGP SIGNATURE-----
+
+iF0EABECAB0WIQRao7wzT9fjNp58d7KRxVnb5MkSOwUCXBJw+AAKCRCRxVnb5MkS
+O/WqAJwPYp+vWiAjkVDriYwwrSC2Fm65BgCfVNos7C0/Aadlmhz1cQFC40nBxSU=
+=uux4
+-----END PGP SIGNATURE-----