diff --git a/game-music-emu-0.6.1.tar.bz2 b/game-music-emu-0.6.1.tar.bz2
deleted file mode 100644
index f94e461..0000000
Binary files a/game-music-emu-0.6.1.tar.bz2 and /dev/null differ
diff --git a/game-music-emu-0.6.2.tar.xz b/game-music-emu-0.6.2.tar.xz
new file mode 100644
index 0000000..91fc2a3
Binary files /dev/null and b/game-music-emu-0.6.2.tar.xz differ
diff --git a/game-music-emu.spec b/game-music-emu.spec
index 3547ef6..26dca51 100644
--- a/game-music-emu.spec
+++ b/game-music-emu.spec
@@ -1,10 +1,10 @@
 Name:           game-music-emu
-Version:        0.6.1
-Release:        8
+Version:        0.6.2
+Release:        1
 Summary:        Video game music file emulation/playback library,Demo player utilizing Game_Music_Emu
 License:        LGPLv2+ and MIT
 URL:            https://bitbucket.org/mpyne/game-music-emu/wiki/Home
-Source0:        https://bitbucket.org/mpyne/game-music-emu/downloads/%{name}-%{version}.tar.bz2
+Source0:        https://bitbucket.org/mpyne/game-music-emu/downloads/%{name}-%{version}.tar.xz
 Provides:       libgme = %{version}-%{release} %{name}-player = %{version}-%{release}
 Obsoletes:      %{name}-player < %{version}-%{release}
 
@@ -67,6 +67,9 @@ cd player
 %{_libdir}/pkgconfig/libgme.pc
 
 %changelog
+* Thu Feb 10 2022 yaoxin <yaoxin30@huawei.com> - 0.6.2-1
+- Upgrade game-music-emu to 0.6.2 to fix CVE-2017-17446
+
 * Mon Aug 2 2021 Haiwei Li <lihaiwei8@huawei.com> - 0.6.1-8
 - Fix complication failed due to gcc upgrade