diff --git a/edk2.spec b/edk2.spec
index 24921d6ab0883ba586482ba3c42c31c247ef8576..7980e18df7491dcc403b664d6443e933af193c73 100644
--- a/edk2.spec
+++ b/edk2.spec
@@ -1,4 +1,4 @@
-%define anolis_release 17
+%define anolis_release 18
 
 %undefine _auto_set_build_flags
 ExclusiveArch: x86_64 aarch64 loongarch64 riscv64
@@ -38,7 +38,7 @@ URL:        http://www.tianocore.org
 
 Source0: https://github.com/tianocore/edk2/archive/refs/tags/edk2-stable%{version}.tar.gz
 Source1: ovmf-whitepaper-c770f8c.txt
-Source2: openssl-%{OPENSSL_VER}.tar.gz
+Source2: https://github.com/openssl/openssl/releases/download/openssl-%{OPENSSL_VER}/openssl-%{OPENSSL_VER}.tar.gz
 # https://github.com/ucb-bar/berkeley-softfloat-3/tree/b64af41c3276f97f0e181920400ee056b9c88037
 Source3: softfloat-%{softfloat_version}.tar.xz
 # https://github.com/tianocore/edk2-platforms/commit/7f42d4034c8f4266da691df69dce18234f752cb4
@@ -564,6 +564,9 @@ rm -f %{buildroot}%{_datadir}/edk2/riscv/*.raw
 
 
 %changelog
+* Tue Aug 19 2025 zjl02254423 <zjl02254423@libaba-inc.com> -202402-18
+- update Source2 to fix check_source warning
+
 * Wed Aug 06 2025 wenxin <wx02272781@alibaba-inc.com> - 202402-17
 - add patch to fix CVE-2024-38797