diff --git a/wireshark-1.6.3.tar.bz2 b/wireshark-1.6.3.tar.bz2
deleted file mode 100644
index 5f4c34f..0000000
--- a/wireshark-1.6.3.tar.bz2
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:07084c9e0f0a8acefe9fbe860762d2b323b4867e7202d6146f5c581d1d5303e0
-size 21468737
diff --git a/wireshark-1.6.5.tar.bz2 b/wireshark-1.6.5.tar.bz2
new file mode 100644
index 0000000..3a9cd0d
--- /dev/null
+++ b/wireshark-1.6.5.tar.bz2
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:151768199f9b50f5593b97025a33303df4d3b3983a203be89d8a1f5ba830bfcd
+size 21505901
diff --git a/wireshark.changes b/wireshark.changes
index ae5f5aa..2177722 100644
--- a/wireshark.changes
+++ b/wireshark.changes
@@ -1,3 +1,68 @@
+-------------------------------------------------------------------
+Tue Jan 17 06:13:35 UTC 2012 - cyliu@suse.com
+
+- update to 1.6.5
+  - Security fixes:
+    - wnpa-sec-2012-01 Laurent Butti discovered that Wireshark failed to
+      properly check record sizes for many packet capture file formats. 
+      (Bug 6663, bug 6666, bug 6667, bug 6668, bug 6669, bug 6670)
+    - wnpa-sec-2012-02  Wireshark could dereference a NULL pointer and 
+      crash. (Bug 6634)
+    - wnpa-sec-2012-03  The RLC dissector could overflow a buffer. (Bug 6391)
+  - Bug fixes:
+    - "Closing File!" Dialog Hangs. (Bug 3046)
+    - Sub-fields of data field should appear in exported PDML as children
+      of the data field instead of as siblings to it. (Bug 3809)
+    - Incorrect time differences displayed with time reference set. (Bug 5580)
+    - Wrong packet type association of SNMP trap after TFTP transfer. (Bug 5727)
+    - SSL/TLS decryption needs wireshark to be rebooted. (Bug 6032)
+    - Export HTTP Objects -> save all crashes Wireshark. (Bug 6250)
+    - Wireshark Netflow dissector complains there is no template found though 
+      the template is exported. (Bug 6325)
+    - DCERPC EPM tower UUID must be interpreted always as little endian.
+      (Bug 6368)
+    - Crash if no recent files. (Bug 6549)
+    - IPv6 frame containing routing header with 0 segments left calculates wrong
+      UDP checksum. (Bug 6560)
+    - IPv4 UDP/TCP Checksum incorrect if routing header present. (Bug 6561)
+    - Incorrect Parsing of SCPS Capabilities Option introduced in response 
+      to bug 6194. (Bug 6562)
+    - Various crashes after loading NetMon2.x capture file. (Bug 6578)
+    - Fixed compilation of dumpcap on some systems (when MUST_DO_SELECT is 
+      defined). (Bug 6614)
+    - SIGSEGV in SVN 40046. (Bug 6634)
+    - Wireshark dissects TCP option 25 as an "April 1" option. (Bug 6643)
+    - ZigBee ZCL Dissector reports invalid status. (Bug 6649)
+    - ICMPv6 DNSSL option malformed on padding. (Bug 6660)
+    - Wrong tvb_get_bits function call in packet-csn1.c. (Bug 6708)
+    - [UDP] - Length Field of Pseudo Header while computing CheckSum is not
+      correct. (Bug 6711)
+    - pcapio.c: bug in libpcap_write_interface_description_block. (Bug 6719)
+    - Memory leaks in various dissectors.
+    - Bytes highlighted in wrong Byte pane when field selected in Details pane. 
+  - Updated Protocol Support
+    - BGP, BMC CSN1, DCERPC EPM, DCP(ETSI) DMP DTLS GSM Management, 
+      H245 HPTEAM, ICMPv6, IEEE 802.15.4 IPSEC IPv4, IPv6,
+      ISAKMP KERBEROS LDSS NFS RLC, RPC-NETLOGON RRC RTMPT SIGCOMP
+      SSL SYSLOG TCP, UDP, XML ZigBee ZCL 
+  - New and Updated Capture File Support
+    - Accellent 5Views, AIX iptrace, HP-UX nettl, I4B, Microsoft Network 
+      Monitor, Novell LANalyzer, PacketLogger, Pcap-ng, Sniffer, Tektronix
+      K12, WildPackets {Airo,Ether}Peek. 
+
+- update to 1.6.4
+  - Bug fixes:
+    - Patch to fix memory leaks/errors in Lua plugin. (Bug 5575)
+    - Wireshark crashes if a field of type BASE_CUSTOM is applied as a 
+      column. (Bug 6503)
+    - Filter Expression dialog can only be opened once. (Bug 6537)
+    - Wireshark crashes if compiled without GLib thread support. (Bug 6540)
+    - 80211 QoS Control: Add Raw TID. (Bug 6548)
+    - SNMP length check error. (Bug 6564)
+    - UCP dissector bug of operation 61. (Bug 6570) 
+
+- fix bnc#741187, #741188, #741190 
+
 -------------------------------------------------------------------
 Wed Nov  2 15:07:21 UTC 2011 - tabraham@novell.com
 
diff --git a/wireshark.spec b/wireshark.spec
index 4e85f2e..c75c14d 100644
--- a/wireshark.spec
+++ b/wireshark.spec
@@ -1,7 +1,7 @@
 #
 # spec file for package wireshark
 #
-# Copyright (c) 2011 SUSE LINUX Products GmbH, Nuernberg, Germany.
+# Copyright (c) 2012 SUSE LINUX Products GmbH, Nuernberg, Germany.
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -20,7 +20,7 @@
 %define use_caps 0
 
 Name:           wireshark
-Version:        1.6.3
+Version:        1.6.5
 Release:        1
 License:        GPL-2.0+
 Summary:        A Network Traffic Analyser