diff --git a/sofia-sip.spec b/sofia-sip.spec
index d8278ce..e7a2427 100644
--- a/sofia-sip.spec
+++ b/sofia-sip.spec
@@ -1,6 +1,6 @@
 Name:           sofia-sip
-Version:        1.13.7
-Release:        2
+Version:        1.13.8
+Release:        1
 Summary:        Sofia SIP User-Agent library
 License:        LGPLv2+
 URL:            http://sofia-sip.sourceforge.net/
@@ -63,6 +63,10 @@ find . -name installdox -delete
 %{_datadir}/sofia-sip
 
 %changelog
+* Tue Aug 16 2022 lin zhang <lin.zhang@turbolinux.com.cn> - 1.13.8-1
+- update to 1.13.8
+- fix CVE-2022-31001,CVE-2022-31002,CVE-2022-31003
+
 * Mon Mar 28 2022 lin zhang <lin.zhang@turbolinux.com.cn> - 1.13.7-2
 - delete subpackage
 
diff --git a/v1.13.7.tar.gz b/v1.13.7.tar.gz
deleted file mode 100644
index 7fc7789..0000000
Binary files a/v1.13.7.tar.gz and /dev/null differ
diff --git a/v1.13.8.tar.gz b/v1.13.8.tar.gz
new file mode 100644
index 0000000..0a9cd98
Binary files /dev/null and b/v1.13.8.tar.gz differ