diff --git a/Image-ExifTool-12.30.tar.gz b/Image-ExifTool-12.30.tar.gz
deleted file mode 100644
index 6a3a3e9..0000000
--- a/Image-ExifTool-12.30.tar.gz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:3be7cda70b471df589c75a4adbb71bae62e633022b0ba62585f3bcd91b35544f
-size 4948601
diff --git a/Image-ExifTool-12.39.tar.gz b/Image-ExifTool-12.39.tar.gz
new file mode 100644
index 0000000..941f8b4
--- /dev/null
+++ b/Image-ExifTool-12.39.tar.gz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:403ab5293a44725f045a3f5afdbc45d13c20854ba51f7d0ee720d5d30b31cba2
+size 5028710
diff --git a/perl-Image-ExifTool.changes b/perl-Image-ExifTool.changes
index 087d849..78dd1ab 100644
--- a/perl-Image-ExifTool.changes
+++ b/perl-Image-ExifTool.changes
@@ -1,3 +1,11 @@
+-------------------------------------------------------------------
+Tue Feb  1 21:05:57 UTC 2022 - Dirk Stoecker <opensuse@dstoecker.de>
+
+- update to version 12.39 - not CPAN released
+  For changes in version 12.31 to 12.39 see Changes file
+
+- fixes CVE-2022-23935 security issue
+
 -------------------------------------------------------------------
 Fri Sep 17 07:16:54 UTC 2021 - Dirk Müller <dmueller@suse.com>
 
diff --git a/perl-Image-ExifTool.spec b/perl-Image-ExifTool.spec
index 50f0477..7fce006 100644
--- a/perl-Image-ExifTool.spec
+++ b/perl-Image-ExifTool.spec
@@ -1,7 +1,7 @@
 #
 # spec file for package perl-Image-ExifTool
 #
-# Copyright (c) 2021 SUSE LLC
+# Copyright (c) 2022 SUSE LLC
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -18,12 +18,14 @@
 
 %define cpan_name Image-ExifTool
 Name:           perl-Image-ExifTool
-Version:        12.30
+Version:        12.39
 Release:        0
 License:        Artistic-1.0 OR GPL-1.0-or-later
 Summary:        Read and write meta information
 URL:            https://metacpan.org/release/%{cpan_name}
-Source0:        https://cpan.metacpan.org/authors/id/E/EX/EXIFTOOL/%{cpan_name}-%{version}.tar.gz
+# use non-release build because of CVE-2022-23935
+#Source0:        https://cpan.metacpan.org/authors/id/E/EX/EXIFTOOL/%%{cpan_name}-%%{version}.tar.gz
+Source0:        https://exiftool.org/%{cpan_name}-%{version}.tar.gz
 Source1:        cpanspec.yml
 BuildArch:      noarch
 BuildRequires:  perl