diff --git a/jdk-updates-jdk16u-jdk-16.0.1+9.tar.gz b/jdk-updates-jdk16u-jdk-16.0.1+9.tar.gz
deleted file mode 100644
index 3d71610244ea64848db5bd0a5b08d3b059faa1ef..0000000000000000000000000000000000000000
Binary files a/jdk-updates-jdk16u-jdk-16.0.1+9.tar.gz and /dev/null differ
diff --git a/jdk-updates-jdk16u-jdk-16.0.2+7.tar.gz b/jdk-updates-jdk16u-jdk-16.0.2+7.tar.gz
new file mode 100644
index 0000000000000000000000000000000000000000..f600b3baa74f0316f584f151657a33dbb511f192
Binary files /dev/null and b/jdk-updates-jdk16u-jdk-16.0.2+7.tar.gz differ
diff --git a/openjdk-latest.spec b/openjdk-latest.spec
index fb17c3088e12e531467ffe77d3442cf3c88c667e..091d0a6f0fa17b1be694ad8b6830c7f87c817562 100644
--- a/openjdk-latest.spec
+++ b/openjdk-latest.spec
@@ -152,7 +152,7 @@
 # Used via new version scheme. JDK 16 was
 # GA'ed in March 2021 => 21.3
 %global vendor_version_string 21.3
-%global securityver 1
+%global securityver 2
 # buildjdkver is usually same as %%{majorver},
 # but in time of bootstrap of next jdk, it is majorver-1, 
 # and this it is better to change it here, on single place
@@ -167,8 +167,8 @@
 %global origin_nice     OpenJDK
 %global top_level_dir_name   %{origin}
 %global minorver        0
-%global buildver        9
-%global rpmrelease      2
+%global buildver        7
+%global rpmrelease      0
 # priority must be 8 digits in total; up to openjdk 1.8, we were using 18..... so when we moved to 11, we had to add another digit
 %if %is_system_jdk
 %global priority %( printf '%02d%02d%02d%02d' %{majorver} %{minorver} %{securityver} %{buildver} )
@@ -1738,6 +1738,9 @@ require "copy_jdk_configs.lua"
 
 
 %changelog
+* Tuh Sep 9 2021 noah <hedongbo@huawei.com> - 1:16.0.2.7-0.rolling
+- Update to jdk-16.0.2+7
+
 * Thu Jul 8 2021 noah <hedongbo@huawei.com> - 1:16.0.1.9-2.rolling
 - delete build log and bootstrap_build to reduce build time