diff --git a/aiohttp-3.9.1.tar.gz b/aiohttp-3.9.1.tar.gz
deleted file mode 100644
index c3a579c..0000000
Binary files a/aiohttp-3.9.1.tar.gz and /dev/null differ
diff --git a/aiohttp-3.9.3.tar.gz b/aiohttp-3.9.3.tar.gz
new file mode 100644
index 0000000..863954b
Binary files /dev/null and b/aiohttp-3.9.3.tar.gz differ
diff --git a/python-aiohttp.spec b/python-aiohttp.spec
index adbdee1..f3dc0de 100644
--- a/python-aiohttp.spec
+++ b/python-aiohttp.spec
@@ -1,6 +1,6 @@
 %global _empty_manifest_terminate_build 0
 Name:           python-aiohttp
-Version:        3.9.1
+Version:        3.9.3
 Release:        1
 Summary:        Async http client/server framework (asyncio)
 License:        Apache 2
@@ -81,6 +81,9 @@ mv %{buildroot}/doclist.lst .
 %{_docdir}/*
 
 %changelog
+* Wed Jan 31 2024 yaoxin <yao_xin001@hoperun.com> - 3.9.3-1
+- Upgrade to 3.9.3 for fix CVE-2024-23334 and CVE-2024-23829
+
 * Fri Dec 01 2023 wangkai <13474090681@163.com> - 3.9.1-1
 - Upgrade to 3.9.1 for fix CVE-2023-47627,CVE-2023-49081,CVE-2023-49082