diff --git a/aiohttp-3.8.5.tar.gz b/aiohttp-3.8.5.tar.gz
deleted file mode 100644
index b902886..0000000
Binary files a/aiohttp-3.8.5.tar.gz and /dev/null differ
diff --git a/aiohttp-3.9.1.tar.gz b/aiohttp-3.9.1.tar.gz
new file mode 100644
index 0000000..c3a579c
Binary files /dev/null and b/aiohttp-3.9.1.tar.gz differ
diff --git a/python-aiohttp.spec b/python-aiohttp.spec
index ef0bf64..adbdee1 100644
--- a/python-aiohttp.spec
+++ b/python-aiohttp.spec
@@ -1,6 +1,6 @@
 %global _empty_manifest_terminate_build 0
 Name:           python-aiohttp
-Version:        3.8.5
+Version:        3.9.1
 Release:        1
 Summary:        Async http client/server framework (asyncio)
 License:        Apache 2
@@ -81,6 +81,9 @@ mv %{buildroot}/doclist.lst .
 %{_docdir}/*
 
 %changelog
+* Fri Dec 01 2023 wangkai <13474090681@163.com> - 3.9.1-1
+- Upgrade to 3.9.1 for fix CVE-2023-47627,CVE-2023-49081,CVE-2023-49082
+
 * Mon Aug 14 2023 yaoxin <yao_xin001@hoperun.com> - 3.8.5-1
 - Upgrade to 3.8.5 for fix CVE-2023-37276
 
diff --git a/python-aiohttp.yaml b/python-aiohttp.yaml
new file mode 100644
index 0000000..bf8d20f
--- /dev/null
+++ b/python-aiohttp.yaml
@@ -0,0 +1,4 @@
+version_control: github
+src_repo: aio-libs/aiohttp
+tag_prefix: ^v
+separator: .