diff --git a/expat-2.5.0.tar.gz b/expat-2.5.0.tar.gz
deleted file mode 100644
index 128f484475908d21d5d708d8b450aba750cb1c06..0000000000000000000000000000000000000000
Binary files a/expat-2.5.0.tar.gz and /dev/null differ
diff --git a/expat-2.6.4.tar.gz b/expat-2.6.4.tar.gz
new file mode 100644
index 0000000000000000000000000000000000000000..66c596f7d39037ff8603fe679c6704798069e9f8
Binary files /dev/null and b/expat-2.6.4.tar.gz differ
diff --git a/expat.spec b/expat.spec
index 3a2397612079c348e68427be584252cee642770d..96381a28b4153e06a401ad5469433bd18852f237 100644
--- a/expat.spec
+++ b/expat.spec
@@ -1,5 +1,5 @@
-%define anolis_release 2
-%global unversion 2_5_0
+%define anolis_release 1
+%global unversion 2_6_4
 
 Summary: An XML parser library
 Name: expat
@@ -86,6 +86,13 @@ make check
 %{_libdir}/libexpat.a
 
 %changelog
+* Wed Dec 11 2024 mgb01105731 <mgb01105731@alibaba-inc.com> - 2.6.4-1
+- update to 2.6.4
+
+* Fri Aug 02 2024 Kaiqiang Wang <wangkaiqiang@inspur.com> - 2.6.0-1
+- update to 2.6.0
+- fix CVE-2023-52425
+
 * Wed Dec 27 2023 happy_orange <songnannan@linux.alibaba.com> - 2.5.0-2
 - fix the source error