diff --git a/1.4.2.tar.gz b/1.4.2.tar.gz
deleted file mode 100644
index a9c0759c84a7837aa3a294c3b451c138f667525c..0000000000000000000000000000000000000000
Binary files a/1.4.2.tar.gz and /dev/null differ
diff --git a/osc-1.9.1.tar.gz b/osc-1.9.1.tar.gz
new file mode 100644
index 0000000000000000000000000000000000000000..7830b4d21445ac0aafba3c37c6bec623f4b0fb42
Binary files /dev/null and b/osc-1.9.1.tar.gz differ
diff --git a/osc.spec b/osc.spec
index 2e9b78380ffe1016be366f7e6e0d2f57e157e9f5..d67cc0480399c725bcc94a1fabcfd06b671b9b5b 100644
--- a/osc.spec
+++ b/osc.spec
@@ -3,12 +3,12 @@
 %global obs_srcsvc_dir %{obsroot}/service
 
 Name:           osc
-Version:        1.4.2
+Version:        1.9.1
 Release:        1
 Summary:        The Command Line Interface to work with an Open Build Service
 License:        GPLv2+
 Url:            https://github.com/openSUSE/osc
-Source:         https://github.com/openSUSE/osc/archive/%{version}.tar.gz
+Source:         https://github.com/openSUSE/osc/archive/%{version}/%{name}-%{version}.tar.gz
 BuildArch:      noarch
 BuildRequires:  python3-devel python3-distro python3-rpm python3-setuptools diffstat
 BuildRequires:  python3-cryptography python3-urllib3 python3-argparse-manpage
@@ -95,6 +95,9 @@ python3 setup.py test
 %{_mandir}/man1/osc.*
 
 %changelog
+* Tue Sep 10 2024 wangkai <13474090681@163.com> - 1.9.1-1
+- Update to 1.9.1 for fix CVE-2024-22034
+
 * Wed Oct 18 2023 wangkai <13474090681@163.com> - 1.4.2-1
 - Upgrade to 1.4.2