diff --git a/base/gitea/gitea.spec b/base/gitea/gitea.spec
index ab6489c..6a18977 100644
--- a/base/gitea/gitea.spec
+++ b/base/gitea/gitea.spec
@@ -2,7 +2,7 @@
 %global _default_patch_fuzz 2
 
 Name:		gitea
-Version:	1.21.9
+Version:	1.21.10
 Release:	1%{dist}
 Summary:	Git with a cup of tea, painless self-hosted git service
 License:	MIT
@@ -20,7 +20,7 @@ BuildRequires:	golang >= 1.21
 BuildRequires:  make
 BuildRequires:  pam-devel
 BuildRequires:  pkgconfig(sqlite3)
-BuildRequires:  pkgconfig(openssl) >= 3.0
+BuildRequires:  pkgconfig(openssl) >= 3.0, pkgconfig(openssl) < 3.8
 BuildRequires:  npm >= 1:8.19
 BuildRequires:  nodejs >= 1:18.0
 BuildRequires:  systemd-rpm-macros
@@ -35,7 +35,9 @@ and Gitlab. Gitea is a fork of Gogs.
 
 %build
 export GOPATH="`pwd`/.godeps"
+%if 0%{?rhel} < 9
 export CGO_CFLAGS="$CGO_CFLAGS -I%{_includedir}/openssl3"
+%endif
 export LDFLAGS='-X "code.gitea.io/gitea/modules/setting.StaticRootPath=%{_datadir}/gitea/web" -X "code.gitea.io/gitea/modules/setting.AppWorkPath=%{_localstatedir}/lib/gitea/" -X "code.gitea.io/gitea/modules/setting.CustomConf=%{_sysconfdir}/gitea/app.ini" -X "main.MakeVersion=GNU Make 4.3" -X "main.Version=%{version}" -X "main.Tags=bindata tidb sqlite sqlite_unlock_notify pam"'
 TAGS="bindata tidb sqlite sqlite_unlock_notify pam" make VERSION=%{version} generate all
 
@@ -87,7 +89,10 @@ cp -r options public templates %{buildroot}%{_datadir}/%{name}/web
 %{_sysusersdir}/%{name}.conf
 
 %changelog
-* Fri Mar 22 2024 Raven <raven@sysadmins.ws> - 1.21.8-1
+* Tue Mar 26 2024 Raven <raven@sysadmins.ws> - 1.21.10-1
+- update to 1.21.10
+
+* Fri Mar 22 2024 Raven <raven@sysadmins.ws> - 1.21.9-1
 - update to 1.21.9
 
 * Wed Mar 13 2024 Raven <raven@sysadmins.ws> - 1.21.8-1