diff --git a/CHANGELOG.rst b/CHANGELOG.rst
index 56a8a44..b96a80a 100644
--- a/CHANGELOG.rst
+++ b/CHANGELOG.rst
@@ -3,6 +3,13 @@ Changelog
 =========
 
 
+4.2.5.0 (2023-09-04)
+====================
+
+* Upgrade Django to 4.2.5 (fixes CVE-2023-41164)
+  see https://www.djangoproject.com/weblog/2023/sep/04/security-releases/ for details
+
+
 4.2.4.0 (2023-08-09)
 ====================
 
diff --git a/aldryn_django/__init__.py b/aldryn_django/__init__.py
index f6fc0b8..daaa04c 100644
--- a/aldryn_django/__init__.py
+++ b/aldryn_django/__init__.py
@@ -1 +1 @@
-__version__ = '4.2.4.0'
+__version__ = '4.2.5.0'
diff --git a/setup.py b/setup.py
index 1b937eb..a451824 100644
--- a/setup.py
+++ b/setup.py
@@ -6,7 +6,7 @@
 
 REQUIREMENTS = [
     'aldryn-addons',
-    'Django==4.2.4',
+    'Django==4.2.5',
 
     # setup utils
     'dj-database-url',