diff --git a/mod_auth_openidc-2.4.15.3.tar.gz b/mod_auth_openidc-2.4.15.3.tar.gz
new file mode 100644
index 0000000..2126c48
Binary files /dev/null and b/mod_auth_openidc-2.4.15.3.tar.gz differ
diff --git a/mod_auth_openidc.spec b/mod_auth_openidc.spec
index 329ec68..147a2b0 100644
--- a/mod_auth_openidc.spec
+++ b/mod_auth_openidc.spec
@@ -6,12 +6,12 @@
 %global httpd_pkg_cache_dir /var/cache/httpd/mod_auth_openidc
 
 Name:           mod_auth_openidc
-Version:        2.4.15
-Release:        2
+Version:        2.4.15.3
+Release:        1
 Summary:        OpenID Connect Relying Party module for Apache 2.x HTTP Server
 License:        ASL 2.0
-URL:            https://github.com/zmartzone/mod_auth_openidc
-Source0:	https://github.com/zmartzone/mod_auth_openidc/archive/refs/tags/v%{version}.tar.gz
+URL:            https://github.com/OpenIDC/mod_auth_openidc
+Source0:        %{url}/releases/download/v%{version}/%{name}-%{version}.tar.gz
 
 BuildRequires:  gcc httpd-devel openssl-devel curl-devel jansson-devel
 BuildRequires:  pcre2-devel autoconf automake cjose-devel jq-devel
@@ -60,6 +60,9 @@ install -m 700 -d $RPM_BUILD_ROOT%{httpd_pkg_cache_dir}/{metadata,cache}
 %dir %attr(0700, apache, apache) %{httpd_pkg_cache_dir}/{metadata,cache}
 
 %changelog
+* Sat Feb 17 2024 yaoxin <yao_xin001@hoperun.com> - 2.4.15.3-1
+- Upgrade to 2.4.15.3 for fix CVE-2024-24814
+
 * Wed Jan 17 2024 yaoxin <yao_xin001@hoperun.com> - 2.4.15-2
 - Port pcre dependency to pcre2
 
diff --git a/mod_auth_openidc.yaml b/mod_auth_openidc.yaml
index f2c87e1..5bb21f3 100644
--- a/mod_auth_openidc.yaml
+++ b/mod_auth_openidc.yaml
@@ -1,4 +1,4 @@
 version_control: github
-src_repo: zmartzone/mod_auth_openidc
-tag_prefix: ^
+src_repo: OpenIDC/mod_auth_openidc
+tag_prefix: ^v
 seperator: .
diff --git a/v2.4.15.tar.gz b/v2.4.15.tar.gz
deleted file mode 100644
index bbddbff..0000000
Binary files a/v2.4.15.tar.gz and /dev/null differ