diff --git a/cjose-0.6.2.3.tar.gz b/cjose-0.6.2.3.tar.gz
deleted file mode 100644
index b8874733d7b773330fa783b64cf61367bddf69b4..0000000000000000000000000000000000000000
Binary files a/cjose-0.6.2.3.tar.gz and /dev/null differ
diff --git a/cjose-0.6.2.4.tar.gz b/cjose-0.6.2.4.tar.gz
new file mode 100644
index 0000000000000000000000000000000000000000..6b0263e8cdc8f02b0e5c413e1a64bc966b4c3280
Binary files /dev/null and b/cjose-0.6.2.4.tar.gz differ
diff --git a/cjose.spec b/cjose.spec
index 9b722e4b0c4ff886f4d589372dcda76628723026..15c56dcba3b7c35e0e08c67b0e7fbe04cee94a2c 100644
--- a/cjose.spec
+++ b/cjose.spec
@@ -1,5 +1,5 @@
 Name:                cjose
-Version:             0.6.2.3
+Version:             0.6.2.4
 Release:             1
 Summary:             C library implementing the Javascript Object Signing and Encryption (JOSE)
 License:             MIT
@@ -47,6 +47,13 @@ make check || (cat test/test-suite.log; exit 1)
 %{_libdir}/pkgconfig/cjose.pc
 
 %changelog
+* Fri Aug 22 2025  openeuler_bot <infra@openeuler.sh> - 0.6.2.4-1
+- fix memory leak in ECDH-ES JWE encryption/decryption (version:0.6.2.4).
+- fix rsa_q = NULL initialization in _RSA_private_fields (version:0.6.2.4).
+- fix memory allocation check (typo) in jwk.c (version:0.6.2.4).
+- fix gcc10 errors for -Werror=ignored-qualifiers and remove unused includes (version:0.6.2.4).
+- re-generate automake/autoconf files with automake v1.17 and libtool v2.5.4 (version:0.6.2.4).
+
 * Mon Jan 06 2025 Suyun <ziyu.oerv@isrc.iscas.ac.cn> - 0.6.2.3-1
 - Update to 0.6.2.3 to fix Clang build errors