diff --git a/aaa_base.changes b/aaa_base.changes
index e962172..624190e 100644
--- a/aaa_base.changes
+++ b/aaa_base.changes
@@ -1,3 +1,10 @@
+-------------------------------------------------------------------
+Thu May  7 11:53:52 CEST 2009 - werner@suse.de
+
+- At shutdown boot.clock should be executed *before* boot.apparmor
+  otherwise it may happen that /etc/localtime is not readable and
+  localtime(3) may fall back to UTC time as system default (bnc#492921).
+
 -------------------------------------------------------------------
 Thu Apr 30 15:30:52 CEST 2009 - werner@suse.de
 
diff --git a/aaa_base.spec b/aaa_base.spec
index 8607dc4..fa9f43b 100644
--- a/aaa_base.spec
+++ b/aaa_base.spec
@@ -28,7 +28,7 @@ Recommends:     cron logrotate
 PreReq:         /usr/bin/sed /usr/bin/grep /bin/mv /bin/cat /bin/ls /bin/date /usr/bin/cmp /bin/fillup /sbin/insserv udev net-tools
 AutoReqProv:    on
 Version:        11.2
-Release:        24
+Release:        25
 Summary:        SUSE Linux Base Package
 BuildRoot:      %{_tmppath}/%{name}-%{version}-build
 Source:         aaa_base.tar.bz2
@@ -139,6 +139,10 @@ rm -f /root/.gnupg/secring.gpg.aaa_save
 %defattr(-,root,root)
 
 %changelog
+* Thu May 07 2009 werner@suse.de
+- At shutdown boot.clock should be executed *before* boot.apparmor
+  otherwise it may happen that /etc/localtime is not readable and
+  localtime(3) may fall back to UTC time as system default (bnc#492921).
 * Thu Apr 30 2009 werner@suse.de
 - First try to support root fs with type aufs (bnc#491890)
 - Use usleep to wait on udev
diff --git a/aaa_base.tar.bz2 b/aaa_base.tar.bz2
index 1d416c9..f630a68 100644
--- a/aaa_base.tar.bz2
+++ b/aaa_base.tar.bz2
@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:0e1c50196a134a877322a02d8763b4ce59043661ae4825201a22dd8f3d6dbec0
-size 80429
+oid sha256:7417d2872e1b1178652d4cbb98deaf6787d42f44f4cb8139a5fad3bdc7292df0
+size 80460