diff --git a/2.0.21.tar.gz b/2.0.21.tar.gz
new file mode 100644
index 0000000..ec0bf1d
Binary files /dev/null and b/2.0.21.tar.gz differ
diff --git a/apache-mina-2.0.9-src.tar.gz b/apache-mina-2.0.9-src.tar.gz
deleted file mode 100644
index 98e15f2..0000000
Binary files a/apache-mina-2.0.9-src.tar.gz and /dev/null differ
diff --git a/apache-mina.spec b/apache-mina.spec
index 6261de1..d104e80 100644
--- a/apache-mina.spec
+++ b/apache-mina.spec
@@ -1,11 +1,10 @@
 Name:                apache-mina
-Version:             2.0.9
+Version:             2.0.21
 Release:             1
 Summary:             Apache MINA
 License:             ASL 2.0
 URL:                 http://mina.apache.org
-Source0:             http://archive.apache.org/dist/mina/mina/%{version}/%{name}-%{version}-src.tar.gz
-
+Source0:             https://github.com/apache/mina/archive/%{version}.tar.gz
 BuildRequires:       maven-local mvn(com.jcraft:jzlib) mvn(commons-lang:commons-lang)
 BuildRequires:       mvn(org.apache:apache:pom:) mvn(org.slf4j:slf4j-api)
 BuildRequires:       mvn(org.apache.felix:maven-bundle-plugin)
@@ -48,8 +47,7 @@ Summary:             API documentation for %{name}
 This package provides %{name}.
 
 %prep
-%setup -q
-mv src/* .
+%setup -q -n mina-%{version}
 sed -i \
     -e 's|<packaging>bundle</packaging>|<packaging>jar</packaging>|g' \
     -e 's|<type>bundle</type>|<type>jar</type>|g' \
@@ -89,5 +87,8 @@ sed -i \
 %doc LICENSE.txt NOTICE.txt
 
 %changelog
+* Mon 21 Sep wangyue <wangyue92@huawei.com> - 2.0.21-1
+- Fix CVE-2019-0231
+
 * Mon Jul 27 2020 leiju <leiju4@huawei.com> - 2.0.9-1
 - Package init