diff --git a/mutt-2.2.10.tar.gz b/mutt-2.2.10.tar.gz
deleted file mode 100644
index 73f18c8..0000000
Binary files a/mutt-2.2.10.tar.gz and /dev/null differ
diff --git a/mutt-2.2.12.tar.gz b/mutt-2.2.12.tar.gz
new file mode 100644
index 0000000..a8e5d4d
Binary files /dev/null and b/mutt-2.2.12.tar.gz differ
diff --git a/mutt.spec b/mutt.spec
index c2db643..cd7d1f7 100644
--- a/mutt.spec
+++ b/mutt.spec
@@ -1,11 +1,11 @@
 Name:           mutt
-Version:        2.2.10
+Version:        2.2.12
 Release:        1
 Epoch:          5
 Summary:        Text-based mail client
 License:        GPLv2+ and Public Domain
 URL:            http://www.mutt.org
-Source:         ftp://ftp.mutt.org/pub/%{name}/%{name}-%{version}.tar.gz
+Source0:        http://ftp.mutt.org/pub/%{name}/%{name}-%{version}.tar.gz
 Source1:        mutt_ldap_query
 
 Patch1:         mutt-1.5.23-system_certs.patch
@@ -123,6 +123,9 @@ ln -sf ./muttrc.5 %{buildroot}%{_mandir}/man5/muttrc.local.5
 %{_infodir}/mutt.info.*
 
 %changelog
+* Thu Sep 14 2023 yaoxin <yao_xin001@hoperun.com> - 5:2.2.12-1
+- Update to 2.2.12 for fix CVE-2023-4874 and CVE-2023-4875
+
 * Wed May 10 2023 liyanan <thistleslyn@163.com> - 5:2.2.10-1
 - Update package to version 2.2.10