diff --git a/.gitignore b/.gitignore
index a3311bf..0569754 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,3 +1,5 @@
+*spec
+clog
 wordpress-3.0.1.tar.gz
 /wordpress-3.0.2.tar.gz
 /wordpress-3.0.3.tar.gz
@@ -35,3 +37,4 @@ wordpress-3.0.1.tar.gz
 /wordpress-3.5-RC3.tar.gz
 /wordpress-3.5.tar.gz
 /wordpress-3.5.1.tar.gz
+/wordpress-3.5.2.tar.gz
diff --git a/sources b/sources
index 301c035..60120d9 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-409889c98b13cbdbb9fd121df859ae3e  wordpress-3.5.1.tar.gz
+90acae65199db7b33084ef36860d7f22  wordpress-3.5.2.tar.gz
diff --git a/wordpress.spec b/wordpress.spec
index 697367b..10525cb 100644
--- a/wordpress.spec
+++ b/wordpress.spec
@@ -4,10 +4,10 @@
 Summary: Blog tool and publishing platform
 URL: http://www.wordpress.org
 Name: wordpress
-Version: 3.5.1
+Version: 3.5.2
 Group: Applications/Publishing
 #Release: 0.5.%{betatag}%{?dist}
-Release: 2%{?dist}
+Release: 1%{?dist}
 License: GPLv2
 #Source0: http://wordpress.org/%{name}-%{version}-%{betatag}.tar.gz
 Source0: http://wordpress.org/%{name}-%{version}.tar.gz
@@ -170,6 +170,11 @@ rm -rf ${RPM_BUILD_ROOT}
 %dir %{_sysconfdir}/wordpress
 
 %changelog
+* Mon Jun 24 2013 Remi Collet <rcollet@redhat.com> - 3.5.2-1
+- version 3.5.1, various bug and security fixes:
+  CVE-2013-2173 CVE-2013-2199 CVE-2013-2200 CVE-2013-2201
+  CVE-2013-2202 CVE-2013-2203 CVE-2013-2204
+
 * Tue Feb 12 2013 Remi Collet <rcollet@redhat.com> - 3.5.1-2
 - provides POP3 class #905867
   POP3 is not from PHPMailer, but from SquirrelMail
@@ -184,7 +189,7 @@ rm -rf ${RPM_BUILD_ROOT}
   upstream archive content change
 - protect akismet content (from upstream .htaccess)
 
-* Mon Jan  2 2013 Remi Collet <rcollet@redhat.com> - 3.5-3
+* Wed Jan  2 2013 Remi Collet <rcollet@redhat.com> - 3.5-3
 - fix links to system PHPMailer library
 
 * Sun Dec 16 2012 Remi Collet <rcollet@redhat.com> - 3.5-2