diff --git a/jdk-jdk20-jdk-20.0.1+9.tar.gz b/jdk-updates-jdk20u-jdk-20.0.2+9.tar.gz
similarity index 82%
rename from jdk-jdk20-jdk-20.0.1+9.tar.gz
rename to jdk-updates-jdk20u-jdk-20.0.2+9.tar.gz
index 10c157d0ccfcfd04ee7dabb0e834db0675528374..741c9d1956f8dcc21ad0cb707fd02614489d2de4 100644
Binary files a/jdk-jdk20-jdk-20.0.1+9.tar.gz and b/jdk-updates-jdk20u-jdk-20.0.2+9.tar.gz differ
diff --git a/openjdk-latest.spec b/openjdk-latest.spec
index 9b81cbbfc19a74472de18e5866a1c4f0f6d14282..32e10715c8ea8e8af2bddca22e0e679981aa6c6a 100644
--- a/openjdk-latest.spec
+++ b/openjdk-latest.spec
@@ -155,7 +155,7 @@
 # Used via new version scheme. JDK 19 was
 # GA'ed in March 2022 => 22.3
 %global vendor_version_string 22.3
-%global securityver 1
+%global securityver 2
 # buildjdkver is usually same as %%{majorver},
 # but in time of bootstrap of next jdk, it is majorver-1,
 # and this it is better to change it here, on single place
@@ -927,7 +927,7 @@ URL:      http://openjdk.java.net/
 
 # to regenerate source0 (jdk) and source8 (jdk's taspets) run update_package.sh
 # update_package.sh contains hard-coded repos, revisions, tags, and projects to regenerate the source archives
-Source0: jdk-jdk%{majorver}-jdk-%{filever}+%{buildver}.tar.gz
+Source0: jdk-updates-jdk%{majorver}u-jdk-%{filever}+%{buildver}.tar.gz
 Source1: OpenJDK20U-jdk_aarch64_linux_hotspot_20.0.2_9.tar.xz
 Source2: OpenJDK20U-jdk_x64_linux_hotspot_20.0.2_9.tar.xz
 Source8: systemtap_3.2_tapsets_hg-icedtea8-9d464368e06d.tar.xz
@@ -1766,6 +1766,9 @@ cjc.mainProgram(arg)
 
 
 %changelog
+* Thu Aug 3 2023 wanghao <wanghao564@huawei.com> - 1:20.0.2.9-0-rolling
+- Update to jdk-20.0.2+9
+
 * Thu May 4 2023 wanghao <wanghao564@huawei.com> - 1:20.0.1.9-0-rolling
 - Update to jdk-20.0.1+9
 - remove pr3183-rh1340845-support_system_crypto_policy.patch