diff --git a/testing/zvbi/APKBUILD b/testing/zvbi/APKBUILD
index 27b1880539700deca1cc6adc27b54971c2dee8f2..36bfc0bc7b467a368f285ea300f72513074303ce 100644
--- a/testing/zvbi/APKBUILD
+++ b/testing/zvbi/APKBUILD
@@ -1,7 +1,7 @@
 # Contributor: Gil Pedersen <gpdev@gpost.dk>
 # Maintainer: Gil Pedersen <gpdev@gpost.dk>
 pkgname=zvbi
-pkgver=0.2.43
+pkgver=0.2.44
 pkgrel=0
 pkgdesc="VBI capture and decoding tools"
 url="https://github.com/zapping-vbi/zvbi"
@@ -15,6 +15,14 @@ source="
 	fix-strptime-input.patch
 "
 
+# secfixes:
+#   0.2.44-r0:
+#     - CVE-2025-2173
+#     - CVE-2025-2174
+#     - CVE-2025-2175
+#     - CVE-2025-2176
+#     - CVE-2025-2177
+
 prepare() {
 	default_prepare
 
@@ -47,6 +55,6 @@ package() {
 }
 
 sha512sums="
-7216e6a3538e4b37d11dd45e5ebaf2b7c0c3b4ba4824e5854d508711f6a048fb9c3bb7b02262c0d91ef3019568ca1119b4b46043a23d1176edfcc78d48f70f48  zvbi-0.2.43.tar.gz
+74b7d44faf42f919ebd3ccb69f8567f56909075d3acf4a3b4dfcbdf85489492f27d8a04173e0010f59706356e4078cd10911945f87e2596de2b897672d1e55cb  zvbi-0.2.44.tar.gz
 c7d4a79775c7ac7d402bb8b1ccdf04a10e818031d193791856542dc4ee110493f94c63c01792c87ce8119c9485db4581dac697366b48b63960a99c09117dee4c  fix-strptime-input.patch
 "