diff --git a/1.2.2.tar.gz b/1.5.0.tar.gz
similarity index 49%
rename from 1.2.2.tar.gz
rename to 1.5.0.tar.gz
index 33b1a2500a0b5378679eea28396fc7ecaded1d36..a724d569e2482b8207296550da71f9a007c3c438 100644
Binary files a/1.2.2.tar.gz and b/1.5.0.tar.gz differ
diff --git a/python-scikit-learn.spec b/python-scikit-learn.spec
index 48701f310449a6141b8b076573f433d5c28afd7c..b58da2b6b0b4f205d5f1faf89374cc4204251da2 100644
--- a/python-scikit-learn.spec
+++ b/python-scikit-learn.spec
@@ -1,4 +1,4 @@
-%define anolis_release 2
+%define anolis_release 1
 
 %bcond_with check
 
@@ -13,7 +13,7 @@ simple and efficient, accessible to everybody, and reusable
 in various contexts.}
 
 Name: python-scikit-learn
-Version: 1.2.2
+Version: 1.5.0
 Release: %{anolis_release}%{dist}
 
 Summary: Machine learning in Python
@@ -23,7 +23,7 @@ Summary: Machine learning in Python
 License: BSD and MIT
 
 URL:      http://scikit-learn.org/
-Source0:  https://github.com/scikit-learn/scikit-learn/archive/refs/tags/1.2.2.tar.gz
+Source0:  https://github.com/scikit-learn/scikit-learn/archive/refs/tags/1.5.0.tar.gz
 
 BuildRequires: gcc
 BuildRequires: gcc-c++
@@ -92,6 +92,10 @@ popd
 %doc examples/ README.rst
 
 %changelog
+* Fri Nov 01 2024 mgb01105731 <mgb01105731@alibaba-inc.com> - 1.5.0-1
+- update to 1.5.0
+- fix CVE-2024-5206
+
 * Fri Mar 15 2024 Zhao Hang <wb-zh951434@alibaba-inc.com> - 1.2.2-2
 - Rebuild with python3.11