diff --git a/1.0.9.tar.gz b/1.0.9.tar.gz
deleted file mode 100644
index 22b92b0..0000000
Binary files a/1.0.9.tar.gz and /dev/null differ
diff --git a/mujs-1.2.0.tar.gz b/mujs-1.2.0.tar.gz
new file mode 100644
index 0000000..6f2ab7e
Binary files /dev/null and b/mujs-1.2.0.tar.gz differ
diff --git a/mujs.spec b/mujs.spec
index 82ed92f..944c672 100644
--- a/mujs.spec
+++ b/mujs.spec
@@ -1,12 +1,13 @@
 Name:           mujs
-Version:        1.0.9
+Version:        1.2.0
 Release:        1
 Summary:        An embeddable Javascript interpreter
 License:        ISC
 URL:            http://mujs.com/
 # The mujs.com download page doesn't provide recent tarballs
 # Github mirror of mujs.com repository provides releases from tags
-Source0:        https://github.com/ccxvii/mujs/archiv/%{version}.tar.gz
+Source0:        https://mujs.com/downloads/mujs-%{version}.tar.gz
+
 BuildRequires:  coreutils
 BuildRequires:  gcc
 BuildRequires:  grep
@@ -48,5 +49,10 @@ make install DESTDIR=%{buildroot} prefix="%{_prefix}" libdir="%{_libdir}" \
 %{_libdir}/lib%{name}.a
 
 %changelog
+* Mon Sep 26 2022 liweiganga <liweiganga@uniontech.com> - 1.2.0-1
+- upstream release 1.2.0
+- fix: fix CVE-2016-10141、CVE-2016-7504、CVE-2016-9136、CVE-2017-5628、CVE-2016-9017、\
+       CVE-2016-7506、CVE-2017-5627、CVE-2016-9108、CVE-2016-9294
+
 * Thu May 13 2021 He Rengui <herengui@uniontech.com> - 1.0.9-1
 - package init