diff --git a/python-mcp.spec b/python-mcp.spec
index 1b72cd5824ccb647b5f16633be34e59fe1c88a91..405669bee4276471cc787070b44fdca5a7734daf 100644
--- a/python-mcp.spec
+++ b/python-mcp.spec
@@ -2,7 +2,7 @@
 %global pypi_name mcp
 
 Name:           python-%{pypi_name}
-Version:        1.6.0
+Version:        1.12.3
 Release:        1
 Summary:        The official Python SDK for Model Context Protocol servers and clients
 License:        MIT
@@ -49,5 +49,8 @@ export UV_DYNAMIC_VERSIONING_BYPASS=%{version}
 
 
 %changelog
+* Fri Aug 01 2025 xieyanlong <xieyanlong@kylinos.cn> - 1.12.3-1
+- Update version to fix CVE-2025-53365 and CVE-2025-53366
+
 * Mon Apr  7 2025 wangkui <wangkui35@h-partner.com> - 1.6.0-1
 - init
diff --git a/v1.12.3.tar.gz b/v1.12.3.tar.gz
new file mode 100644
index 0000000000000000000000000000000000000000..d4edb1dd0e58b7cb8a62c3d6f3f85e875220c15e
Binary files /dev/null and b/v1.12.3.tar.gz differ
diff --git a/v1.6.0.tar.gz b/v1.6.0.tar.gz
deleted file mode 100644
index cfe76c6a968226e430d4cc3fa126f1c4f73a4bfd..0000000000000000000000000000000000000000
Binary files a/v1.6.0.tar.gz and /dev/null differ