diff --git a/xmlsec1.spec b/xmlsec1.spec
index 5ed088de6fc763af385a303534cdf15f8f296296..e56497202cd063754abd454247ee71fdd05ad431 100644
--- a/xmlsec1.spec
+++ b/xmlsec1.spec
@@ -1,6 +1,6 @@
 Name:              xmlsec1
 Version:           1.2.41
-Release:           2
+Release:           3
 Summary:           Library providing support for "XML Signature" and "XML Encryption" standards
 License:           MIT
 URL:               https://www.aleksey.com/xmlsec
@@ -52,7 +52,13 @@ This package contains the libraries and develop content for the xmlsec library.
 
 %build
 autoreconf -vfi
-%configure --disable-static --enable-openssl3-engines --without-gcrypt --without-gnutls
+%configure \
+  --disable-static \
+  --enable-openssl3-engines \
+  --without-gcrypt \
+  --without-gnutls \
+  --disable-md5 \
+  --disable-ripemd160
 %disable_rpath
 %make_build V=1
 
@@ -88,6 +94,10 @@ mv %{buildroot}%{_docdir}/xmlsec1/* __tmp_doc
 %{_mandir}/man1/*.1*
 
 %changelog
+* Thu May 29 2025 Funda Wang <fundawang@yeah.net> - 1.2.41-3
+- disable md5 and ripemd160 per upstream
+  (https://github.com/lsh123/xmlsec/pull/848)
+
 * Sun Apr 27 2025 Funda Wang <fundawang@yeah.net> - 1.2.41-2
 - disable gcrypt backend per upstream
   (https://github.com/lsh123/xmlsec/pull/848)