diff --git a/tuned-2.20.0.tar.gz b/tuned-2.20.0.tar.gz
deleted file mode 100644
index fd1c653041798a957c7f560d440df7cb51daa18d..0000000000000000000000000000000000000000
Binary files a/tuned-2.20.0.tar.gz and /dev/null differ
diff --git a/tuned-2.24.1.tar.gz b/tuned-2.24.1.tar.gz
new file mode 100644
index 0000000000000000000000000000000000000000..3acda32f20741185fcbf4041ceabbefde33a05aa
Binary files /dev/null and b/tuned-2.24.1.tar.gz differ
diff --git a/tuned.spec b/tuned.spec
index e981eef9cce8e1a3307dd326cfbadf54d229e018..613cd6828a9ba888b9d5a7e225e8282f745bf71a 100644
--- a/tuned.spec
+++ b/tuned.spec
@@ -1,7 +1,7 @@
 Summary: A system tuning service for Linux
 Name: tuned
-Version: 2.20.0
-Release: 4
+Version: 2.24.1
+Release: 1
 License: GPLv2+
 Source0: https://github.com/redhat-performance/%{name}/archive/refs/tags/v%{version}.tar.gz#/%{name}-%{version}.tar.gz
 URL: http://www.tuned-project.org/
@@ -297,6 +297,12 @@ fi
 %{_mandir}/man7/tuned-profiles-spectrumscale-ece.7*
 
 %changelog
+* Wed Nov 27 2024 ZhaoYu Jiang <jiangzhaoyu@kylinos.cn> - 2.24.1-1
+- Upgrade to 2.24.1:
+  - fixed privileged execution of arbitrary scripts by active local user. (CVE-2024-52336)
+  - added sanity checks for API methods parameters. (CVE-2024-52337)
+  - tuned-ppd: fixed controller init to correctly set_on_battery
+
 * Fri Sep 20 2024 dufuhang <dufuhang@kylinos.cn> - 2.20.0-4
 - bugfix: expand variables in Plugin._verify_all_device_commands