diff --git a/git-2.47.1.tar.xz b/git-2.47.3.tar.xz
similarity index 50%
rename from git-2.47.1.tar.xz
rename to git-2.47.3.tar.xz
index 20c12a0e78f4c6aea14f81ec942963571d787197..daae39f146893e502033987a69bc1133ae6d39fc 100644
Binary files a/git-2.47.1.tar.xz and b/git-2.47.3.tar.xz differ
diff --git a/git.spec b/git.spec
index 3993eb3503c8040323328e46eea51e7d277200f5..2914eb4d9e9363a7de9ef28849f54749340cdc60 100644
--- a/git.spec
+++ b/git.spec
@@ -1,4 +1,4 @@
-%define anolis_release 2
+%define anolis_release 1
 
 %bcond_without      docs
 %bcond_with         linkcheck
@@ -23,7 +23,7 @@
 %global _package_note_file  %{_builddir}/%{name}-%{version}/.package_note-%{name}-%{version}-%{release}.%{_arch}.ld
 
 Name:           git
-Version:        2.47.1
+Version:        2.47.3
 Release:        %{anolis_release}%{?dist}
 Summary:        Distributed version control system
 License:        BSD-3-Clause AND GPLv2 AND LGPL-2.1-or-later AND MIT
@@ -695,6 +695,9 @@ rmdir --ignore-fail-on-non-empty "$testdir"
 
 
 %changelog
+* Thu Jul 10 2025 Yangcheng <yc02267530@alibaba-inc.com> - 2.47.3-1
+- update to 2.47.3 to fix CVE-2025-48384 CVE-2025-48385 CVE-2025-48386
+
 * Mon Jun 16 2025 Jessica Liu <liu.xuemei1@zte.com.cn> - 2.47.1-2
 - Skip tests which fail on riscv64