diff --git a/0.169.1.tar.gz b/0.169.1.tar.gz
new file mode 100644
index 0000000000000000000000000000000000000000..470c5b369584aab0dbe23a2099066071db2f0cb3
Binary files /dev/null and b/0.169.1.tar.gz differ
diff --git a/osc-0.163.0.tar.gz b/osc-0.163.0.tar.gz
deleted file mode 100644
index b4fa5ac20ce7b178aede292d4031409cc1b69716..0000000000000000000000000000000000000000
Binary files a/osc-0.163.0.tar.gz and /dev/null differ
diff --git a/osc.spec b/osc.spec
index 91d481592f771f8f02086b6d42ab6b138e44f62c..acb02345fa1f197cd25416fcf64362c1e0689506 100644
--- a/osc.spec
+++ b/osc.spec
@@ -1,10 +1,10 @@
 Name:           osc
-Version:        0.163.0
-Release:        237.1.2
+Version:        0.169.1
+Release:        1
 Summary:        The Command Line Interface to work with an Open Build Service
 License:        GPLv2+
 Url:            https://github.com/openSUSE/osc
-Source:         %{url}/archive/%{version}/%{name}-%{version}.tar.gz
+Source:         https://github.com/openSUSE/osc/archive/%{version}.tar.gz
 BuildArch:      noarch
 
 BuildRequires:  python2-devel python2-rpm python2-urlgrabber
@@ -28,7 +28,7 @@ Requires:       %{name} = %{version}-%{release}
 This package contains some man help files for %{name}.
 
 %prep
-%autosetup -p1
+%autosetup -p1 -n osc-%{version}
 
 iconv -f ISO8859-1 -t UTF-8 -o TODO.new TODO
 mv TODO.new TODO
@@ -73,5 +73,8 @@ EOF
 %{_mandir}/man1/osc.*
 
 %changelog
+* Wed Aug 05 2020 yaokai <yaokai13@huawei.com> - 0.169.1-1
+- Upgrade to 0.169.1 to fix CVE-2019-3681
+
 * Wed Nov 27 2019 catastrowings <jianghuhao1994@163.com> - 0.163.0-237.1.2
 - Update to 0.163.0