diff --git a/core20.md b/core20.md
index 9706813..06fd042 100644
--- a/core20.md
+++ b/core20.md
@@ -17,22 +17,22 @@
 
 |     | Mirrors                                                                                                                      | Checksum                                                                                                                     | Signature                                                                                                                                |
 |-----------------|------------------------------------------------------------------------------------------------------------------------------------------|------------------------------------------------------------------------------------------------------------------------------------------|------------------------------------------------------------------------------------------------------------------------------------------|
-| binary (tar.gz) | [myfaces-core-assembly-2.0.24-bin.tar.gz](http://www.apache.org/dyn/closer.lua/myfaces/binaries/myfaces-core-assembly-2.0.24-bin.tar.gz) | [myfaces-core-assembly-2.0.24-bin.tar.gz.md5](https://downloads.apache.org/myfaces/binaries/myfaces-core-assembly-2.0.24-bin.tar.gz.md5) | [myfaces-core-assembly-2.0.24-bin.tar.gz.asc](https://downloads.apache.org/myfaces/binaries/myfaces-core-assembly-2.0.24-bin.tar.gz.asc) |
-| binary (zip)    | [myfaces-core-assembly-2.0.24-bin.zip](http://www.apache.org/dyn/closer.lua/myfaces/binaries/myfaces-core-assembly-2.0.24-bin.zip)       | [myfaces-core-assembly-2.0.24-bin.zip.md5](https://downloads.apache.org/myfaces/binaries/myfaces-core-assembly-2.0.24-bin.zip.md5)       | [myfaces-core-assembly-2.0.24-bin.zip.asc](https://downloads.apache.org/myfaces/binaries/myfaces-core-assembly-2.0.24-bin.zip.asc)       |
-| source (tar.gz) | [myfaces-core-assembly-2.0.24-src.tar.gz](http://www.apache.org/dyn/closer.lua/myfaces/source/myfaces-core-assembly-2.0.24-src.tar.gz)   | [myfaces-core-assembly-2.0.24-src.tar.gz.md5](https://downloads.apache.org/myfaces/source/myfaces-core-assembly-2.0.24-src.tar.gz.md5)   | [myfaces-core-assembly-2.0.24-src.tar.gz.asc](https://downloads.apache.org/myfaces/source/myfaces-core-assembly-2.0.24-src.tar.gz.asc)   |
-| source (zip)    | [myfaces-core-assembly-2.0.24-src.zip](http://www.apache.org/dyn/closer.lua/myfaces/source/myfaces-core-assembly-2.0.24-src.zip)         | [myfaces-core-assembly-2.0.24-src.zip.md5](https://downloads.apache.org/myfaces/source/myfaces-core-assembly-2.0.24-src.zip.md5)         | [myfaces-core-assembly-2.0.24-src.zip.asc](https://downloads.apache.org/myfaces/source/myfaces-core-assembly-2.0.24-src.zip.asc)         |
+| binary (tar.gz) | [myfaces-core-assembly-2.0.25-bin.tar.gz](http://www.apache.org/dyn/closer.lua/myfaces/binaries/myfaces-core-assembly-2.0.25-bin.tar.gz) | [myfaces-core-assembly-2.0.25-bin.tar.gz.md5](https://downloads.apache.org/myfaces/binaries/myfaces-core-assembly-2.0.25-bin.tar.gz.md5) | [myfaces-core-assembly-2.0.25-bin.tar.gz.asc](https://downloads.apache.org/myfaces/binaries/myfaces-core-assembly-2.0.25-bin.tar.gz.asc) |
+| binary (zip)    | [myfaces-core-assembly-2.0.25-bin.zip](http://www.apache.org/dyn/closer.lua/myfaces/binaries/myfaces-core-assembly-2.0.25-bin.zip)       | [myfaces-core-assembly-2.0.25-bin.zip.md5](https://downloads.apache.org/myfaces/binaries/myfaces-core-assembly-2.0.25-bin.zip.md5)       | [myfaces-core-assembly-2.0.25-bin.zip.asc](https://downloads.apache.org/myfaces/binaries/myfaces-core-assembly-2.0.25-bin.zip.asc)       |
+| source (tar.gz) | [myfaces-core-assembly-2.0.25-src.tar.gz](http://www.apache.org/dyn/closer.lua/myfaces/source/myfaces-core-assembly-2.0.25-src.tar.gz)   | [myfaces-core-assembly-2.0.25-src.tar.gz.md5](https://downloads.apache.org/myfaces/source/myfaces-core-assembly-2.0.25-src.tar.gz.md5)   | [myfaces-core-assembly-2.0.25-src.tar.gz.asc](https://downloads.apache.org/myfaces/source/myfaces-core-assembly-2.0.25-src.tar.gz.asc)   |
+| source (zip)    | [myfaces-core-assembly-2.0.25-src.zip](http://www.apache.org/dyn/closer.lua/myfaces/source/myfaces-core-assembly-2.0.25-src.zip)         | [myfaces-core-assembly-2.0.25-src.zip.md5](https://downloads.apache.org/myfaces/source/myfaces-core-assembly-2.0.25-src.zip.md5)         | [myfaces-core-assembly-2.0.25-src.zip.asc](https://downloads.apache.org/myfaces/source/myfaces-core-assembly-2.0.25-src.zip.asc)         |
 
 ## Dependency
 ```xml
 <dependency>
   <groupId>org.apache.myfaces.core</groupId>
   <artifactId>myfaces-api</artifactId>
-  <version>2.0.24</version>
+  <version>2.0.25</version>
 </dependency>
 <dependency>
   <groupId>org.apache.myfaces.core</groupId>
   <artifactId>myfaces-impl</artifactId>
-  <version>2.0.24</version>
+  <version>2.0.25</version>
 </dependency>
 ```
 
@@ -166,7 +166,7 @@
 | o.a.m.COMPRESS_STATE_IN_SESSION | 1.1 | true | true,false | Indicates that the serialized state will be compressed before it is written to the session |
 | o.a.m.CACHE_OLD_VIEWS_IN_SESSION_MODE | 1.2.5 | off | off, no, hard-soft, soft, soft-weak, weak | Define the way of handle old view references(views removed from session), making possible to store it in a cache, so the state  |  |
 | o.a.m.USE_FLASH_SCOPE_PURGE_VIEWS_IN_SESSION | 2.0.6 | false | true, false | Allow use flash scope to keep track of the views used in session and the previous ones, so server side state saving can delete old views even if POST-REDIRECT-GET pattern is used |
-| o.a.m.RANDOM_KEY_IN_VIEW_STATE_SESSION_TOKEN | 2.0.15 | none | secureRandom, random, none | Adds a random key to the generated view state session token |
+| o.a.m.RANDOM_KEY_IN_VIEW_STATE_SESSION_TOKEN | 2.0.15 | secureRandom | secureRandom, random | Adds a random key to the generated view state session token. As of version 2.0.25 the default switched from `random` to `secureRandom`. |
 | o.a.m.RANDOM_KEY_IN_VIEW_STATE_SESSION_TOKEN_LENGTH | 2.0.15 | 8 |  | Set the default length of the random key added to the view state session token |
 | o.a.m.RANDOM_KEY_IN_VIEW_STATE_SESSION_TOKEN_SECURE_RANDOM_CLASS | 2.0.15 |  |  | Sets the random class to initialize the secure random id generator |
 | o.a.m.RANDOM_KEY_IN_VIEW_STATE_SESSION_TOKEN_SECURE_RANDOM_PROVIDER | 2.0.15 |  |  | Sets the random provider to initialize the secure random id generator |
diff --git a/news.md b/news.md
index 7a0ba18..0d5441a 100644
--- a/news.md
+++ b/news.md
@@ -1,5 +1,10 @@
 # News
 
+## May 11, 2021 - MyFaces Core 2.0.25 released
+MyFaces Core 2.0.25 have been released. It is available from the [Download](/core20?id=downloads) page, and in the central Maven repository under Group ID "org.apache.myfaces.core".
+
+Release notes can be found here: [2.0.25](https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=10600&version=12335487)
+
 ## April 23, 2021 - MyFaces Core 2.3.9 released
 MyFaces Core 2.3.9 have been released. It is available from the [Download](/core23?id=downloads) page, and in the central Maven repository under Group ID "org.apache.myfaces.core".