diff --git a/v1.6.4.tar.gz b/libgit2-1.6.5.tar.gz
similarity index 51%
rename from v1.6.4.tar.gz
rename to libgit2-1.6.5.tar.gz
index bdd911b..7835014 100644
Binary files a/v1.6.4.tar.gz and b/libgit2-1.6.5.tar.gz differ
diff --git a/libgit2.spec b/libgit2.spec
index 26e02b3..01b86e7 100644
--- a/libgit2.spec
+++ b/libgit2.spec
@@ -1,10 +1,10 @@
 Name:           libgit2
-Version:        1.6.4
+Version:        1.6.5
 Release:        1
 Summary:        portable, pure C implementation of the Git core methods
 License:        GPLv2 with exceptions
 URL:            https://libgit2.org
-Source0:        https://github.com/libgit2/libgit2/archive/v%{version}.tar.gz
+Source0:        https://github.com/libgit2/libgit2/archive/v%{version}/%{name}-%{version}.tar.gz
 
 BuildRequires:  gcc cmake >= 2.8.11 ninja-build http-parser-devel libcurl-devel
 BuildRequires:  libssh2-devel openssl-devel python3 zlib-devel
@@ -56,6 +56,9 @@ rm -vr deps
 %{_includedir}/git2*
 
 %changelog
+* Wed Feb 07 2024 yaoxin <yao_xin001@hoperun.com> - 1.6.5-1
+- Upgrade to 1.6.5 for fix CVE-2024-24575 and CVE-2024-24577
+
 * Fri Jul 7 2023 liyanan <thistleslyn@163.com> - 1.6.4-1
 - Update to version 1.6.4
 - Abi change: libgit2.so.1.3.2 -> libgit2.so.1.6.4