diff --git a/net/keycloak/Makefile b/net/keycloak/Makefile
index c5d1adca409e..fc174f2b0bc2 100644
--- a/net/keycloak/Makefile
+++ b/net/keycloak/Makefile
@@ -1,87 +1,87 @@
 PORTNAME=	keycloak
-DISTVERSION=	25.0.1
+DISTVERSION=	25.0.2
 CATEGORIES=	net java
 MASTER_SITES=	https://github.com/${PORTNAME}/${PORTNAME}/releases/download/${PORTVERSION}/
 
 MAINTAINER=	freebsd@rheinwolf.de
 COMMENT=	Identity and access management solution
 WWW=		https://www.keycloak.org/
 
 LICENSE=	APACHE20
 LICENSE_FILE=	${WRKSRC}/LICENSE.txt
 
 RUN_DEPENDS=	bash>0:shells/bash
 
 USES=		cpe shebangfix
 
 CPE_VENDOR=	redhat
 
 SHEBANG_FILES=	bin/kc.sh \
 		bin/kcadm.sh \
 		bin/kcreg.sh
 
 USE_JAVA=	yes
 JAVA_VERSION=	21+
 JAVA_OS=	native
 JAVA_VENDOR=	openjdk
 JAVA_RUN=	yes
 
 USE_RC_SUBR=	keycloak
 
 KEYCLOAK_USER=	${PORTNAME}
 KEYCLOAK_GROUP=	${PORTNAME}
 USERS=		${KEYCLOAK_USER}
 GROUPS=		${USERS}
 
 VAR_DIR?=	/var
 LOG_DIR?=	${VAR_DIR}/log/${PORTNAME}
 RUN_DIR?=	${VAR_DIR}/run/${PORTNAME}
 
 NO_ARCH=	yes
 NO_BUILD=	yes
 
 SUB_FILES+=	pkg-message
 SUB_LIST+=	GROUP=${KEYCLOAK_GROUP} \
 		JAVA=${JAVA} \
 		JAVA_HOME=${JAVA_HOME} \
 		LOG_DIR=${LOG_DIR} \
 		PORTNAME=${PORTNAME} \
 		RUN_DIR=${RUN_DIR} \
 		USER=${KEYCLOAK_USER} \
 		GROUP=${KEYCLOAK_GROUP}
 PLIST_SUB=	VERSION=${DISTVERSION} \
 		USER=${KEYCLOAK_USER} \
 		GROUP=${KEYCLOAK_GROUP}
 
 OPTIONS_DEFINE=	DOCS EXAMPLES
 
 CONFIG_FILES=	conf/cache-ispn.xml \
 		conf/keycloak.conf \
 		lib/quarkus/build-system.properties
 
 post-patch:
 .for f in ${CONFIG_FILES}
 	${MV} ${WRKSRC}/${f} ${WRKSRC}/${f}.sample
 .endfor
 	${RM} ${WRKSRC}/bin/kc.bat
 	${RM} ${WRKSRC}/bin/kcadm.bat
 	${RM} ${WRKSRC}/bin/kcreg.bat
 
 do-install:
 	${MKDIR} ${STAGEDIR}${JAVASHAREDIR}/${PORTNAME}/bin
 	${MKDIR} ${STAGEDIR}${JAVASHAREDIR}/${PORTNAME}/data
 	${MKDIR} ${STAGEDIR}${LOG_DIR}
 	${MKDIR} ${STAGEDIR}${RUN_DIR}
 
 	# Install files in bin
 	${INSTALL_SCRIPT} ${WRKSRC}/bin/*.sh ${STAGEDIR}${JAVASHAREDIR}/${PORTNAME}/bin
 	(cd ${WRKSRC}/bin && ${COPYTREE_SHARE} client ${STAGEDIR}${JAVASHAREDIR}/${PORTNAME}/bin)
 
 	# Install jar files, configuration and everything else
 	(cd ${WRKSRC} && ${COPYTREE_SHARE} "conf lib providers themes" ${STAGEDIR}${JAVASHAREDIR}/${PORTNAME})
 
 	# Create links for kc* binaries
 	${LN} -sf ../share/java/${PORTNAME}/bin/kcadm.sh ${STAGEDIR}${PREFIX}/bin/kcadm
 	${LN} -sf ../share/java/${PORTNAME}/bin/kcreg.sh ${STAGEDIR}${PREFIX}/bin/kcreg
 
 .include <bsd.port.mk>
diff --git a/net/keycloak/distinfo b/net/keycloak/distinfo
index 8ea399e10b42..7ec4d62c1840 100644
--- a/net/keycloak/distinfo
+++ b/net/keycloak/distinfo
@@ -1,3 +1,3 @@
-TIMESTAMP = 1719165518
-SHA256 (keycloak-25.0.1.tar.gz) = dc92a309fed7851ad05e515b1655cba5c208a44b2c8c10a453e2094ecf0f277b
-SIZE (keycloak-25.0.1.tar.gz) = 146440023
+TIMESTAMP = 1721294958
+SHA256 (keycloak-25.0.2.tar.gz) = c8eb400552174e4b892c4ce9f2114cfee909ef9ebe86f082944b4a0ec47a8825
+SIZE (keycloak-25.0.2.tar.gz) = 146442769