diff --git a/deepin-reader-5.9.9.2.tar.gz b/deepin-reader-5.9.9.2.tar.gz
deleted file mode 100644
index ac32c6532cfb9118cd56f2d8568304445e28e62f..0000000000000000000000000000000000000000
Binary files a/deepin-reader-5.9.9.2.tar.gz and /dev/null differ
diff --git a/deepin-reader-6.0.7.tar.gz b/deepin-reader-6.0.7.tar.gz
new file mode 100644
index 0000000000000000000000000000000000000000..a55bba1f3ed4108f5ce2285f6849126033a7cdd8
Binary files /dev/null and b/deepin-reader-6.0.7.tar.gz differ
diff --git a/deepin-reader.spec b/deepin-reader.spec
index c2cb4ad72425db8539a1117cafd1baeec74ba7f2..72c3f53da0e6ca1da4fad1f94e87899cfba870d4 100644
--- a/deepin-reader.spec
+++ b/deepin-reader.spec
@@ -5,8 +5,8 @@
 %global debug_package   %{nil}
 
 Name:           deepin-reader
-Version:        5.9.9.2
-Release:        2.%{anolis_release}%{?dist}
+Version:        6.0.7
+Release:        1.%{anolis_release}%{?dist}
 Summary:        A simple PDF reader, supporting bookmarks, highlights and annotations
 License:        GPLv3+
 URL:            https://github.com/linuxdeepin/%{name}
@@ -68,6 +68,10 @@ popd
 /usr/lib/deepin-reader/libdeepin-poppler*
 
 %changelog
+* Fri Aug 30 2024 Kaiqiang Wang <wangkaiqiang@ieisystem.com> - 6.0.7-1.1
+- update to 6.0.7
+- fix CVE-2023-50254
+
 * Tue Jan 09 2024 yangxianzhao <yangxianzhao@uniontech.com> - 5.9.9.2-2.1
 - fix build error