diff --git a/mod_auth_openidc.spec b/mod_auth_openidc.spec
index 299d117cda9c8bad130f0ea83e299795824a40c3..15eb07d2f5c49eb6fd835e37fe0ad9a983393acb 100644
--- a/mod_auth_openidc.spec
+++ b/mod_auth_openidc.spec
@@ -6,7 +6,7 @@
 %global httpd_pkg_cache_dir /var/cache/httpd/mod_auth_openidc
 
 Name:           mod_auth_openidc
-Version:        2.4.9.4
+Version:        2.4.13.2
 Release:        1
 Summary:        OpenID Connect Relying Party module for Apache 2.x HTTP Server
 License:        ASL 2.0
@@ -15,6 +15,7 @@ Source0:	https://github.com/zmartzone/mod_auth_openidc/archive/refs/tags/v%{vers
 
 BuildRequires:  gcc httpd-devel openssl-devel curl-devel jansson-devel
 BuildRequires:  pcre-devel autoconf automake cjose-devel jq-devel
+BuildRequires:  libtool
 Requires:       httpd-mmn = %{_httpd_mmn}
 
 %description
@@ -27,18 +28,18 @@ an OpenID Connect Relying Party(RP) to an OpenID Connect Provider(OP).
 %build
 export MODULES_DIR=%{_httpd_moddir}
 export APXS2_OPTS='-S LIBEXECDIR=${MODULES_DIR}'
-autoreconf
+autoreconf -vfi
 %configure --with-jq=/usr/lib64/ --without-hiredis
 make %{?_smp_mflags}
 
 %check
 export MODULES_DIR=%{_httpd_moddir}
 export APXS2_OPTS='-S LIBEXECDIR=${MODULES_DIR}'
-make test
+make check
 
 %install
 install -d $RPM_BUILD_ROOT%{_httpd_moddir}
-make install MODULES_DIR=$RPM_BUILD_ROOT%{_httpd_moddir}
+make install DESTDIR=$RPM_BUILD_ROOT MODULES_DIR=$RPM_BUILD_ROOT%{_httpd_moddir}
 
 install -m 755 -d $RPM_BUILD_ROOT%{_httpd_modconfdir}
 echo 'LoadModule auth_openidc_module modules/mod_auth_openidc.so' > \
@@ -47,6 +48,7 @@ echo 'LoadModule auth_openidc_module modules/mod_auth_openidc.so' > \
 install -m 755 -d $RPM_BUILD_ROOT%{_httpd_confdir}
 install -m 644 auth_openidc.conf $RPM_BUILD_ROOT%{_httpd_confdir}
 sed -i 's!/var/cache/apache2/!/var/cache/httpd/!' $RPM_BUILD_ROOT%{_httpd_confdir}/auth_openidc.conf
+install -m 700 -d $RPM_BUILD_ROOT%{httpd_pkg_cache_dir}
 install -m 700 -d $RPM_BUILD_ROOT%{httpd_pkg_cache_dir}/{metadata,cache}
 
 %files
@@ -58,6 +60,9 @@ install -m 700 -d $RPM_BUILD_ROOT%{httpd_pkg_cache_dir}/{metadata,cache}
 %dir %attr(0700, apache, apache) %{httpd_pkg_cache_dir}/{metadata,cache}
 
 %changelog
+* Wed Apr 12 2023 yaoxin <yao_xin001@hoperun.com> - 2.4.13.2-1
+- Update to 2.4.13.2 to fix CVE-2023-28625
+
 * Wed Sep 15 2021 houyingchao <houyingchao@huawei.com> 2.4.9.4-1
 - Upgrade to 2.4.9.4
 - Fix CVE-2021-39191
diff --git a/v2.4.13.2.tar.gz b/v2.4.13.2.tar.gz
new file mode 100644
index 0000000000000000000000000000000000000000..cb142bda548e751d9eab55435fdb2bc2dde97f75
Binary files /dev/null and b/v2.4.13.2.tar.gz differ
diff --git a/v2.4.9.4.tar.gz b/v2.4.9.4.tar.gz
deleted file mode 100644
index 87b64f7fd7016e57a8c68d4bba817ba027998345..0000000000000000000000000000000000000000
Binary files a/v2.4.9.4.tar.gz and /dev/null differ