diff --git a/expat-2.2.10.tar.gz b/expat-2.2.10.tar.gz
deleted file mode 100644
index b8967fd..0000000
Binary files a/expat-2.2.10.tar.gz and /dev/null differ
diff --git a/expat-2.4.1.tar.gz b/expat-2.4.1.tar.gz
new file mode 100644
index 0000000..b79e891
Binary files /dev/null and b/expat-2.4.1.tar.gz differ
diff --git a/expat.spec b/expat.spec
index e94e66e..c0da60a 100644
--- a/expat.spec
+++ b/expat.spec
@@ -1,6 +1,6 @@
 %define Rversion %(echo %{version} | sed -e 's/\\./_/g' -e 's/^/R_/')
 Name:           expat
-Version:        2.2.10
+Version:        2.4.1
 Release:        1
 Summary:        An XML parser library
 License:        MIT
@@ -50,6 +50,7 @@ make check
 %defattr(-,root,root)
 %{_includedir}/*
 %{_libdir}/{libexpat.*a,libexpat.so}
+%{_libdir}/cmake/expat-%{version}
 %{_libdir}/pkgconfig/expat.pc
 
 %files help
@@ -58,6 +59,10 @@ make check
 %{_mandir}/man1/*
 
 %changelog
+* Tue Jul 6 2021 panxiaohe <panxiaohe@huawei.com> - 2.4.1-1
+- update to 2.4.1
+- fix CVE-2013-0340
+
 * Wed Jan 20 2021 wangchen <wangchen137@huawei.com> - 2.2.10-1
 - update to 2.2.10