diff --git a/libsoup-3.6.1.tar.xz b/libsoup-3.6.1.tar.xz
deleted file mode 100644
index 49ac75dd53c914183175fc8aa9a927d37cad818a..0000000000000000000000000000000000000000
Binary files a/libsoup-3.6.1.tar.xz and /dev/null differ
diff --git a/libsoup-3.6.5.tar.xz b/libsoup-3.6.5.tar.xz
new file mode 100644
index 0000000000000000000000000000000000000000..10df9e3ae6241072c4a7b7bea156c703d8992f27
Binary files /dev/null and b/libsoup-3.6.5.tar.xz differ
diff --git a/libsoup3.spec b/libsoup3.spec
index be1356e5496f26b57d0e7961647b46c8ac07d261..d583acf9722aa60b850b549a8ff23a790af81f96 100644
--- a/libsoup3.spec
+++ b/libsoup3.spec
@@ -4,14 +4,14 @@
 %{!?with_docs: %global with_docs 1}
 
 Name:    libsoup3
-Version: 3.6.1
+Version: 3.6.5
 Release: %{anolis_release}%{dist}
 
 Summary: Soup, an HTTP library implementation
 
 License: LGPL-2.0-or-later
 URL:     https://wiki.gnome.org/Projects/libsoup
-Source0: https://download.gnome.org/sources/libsoup/3.4/libsoup-%{version}.tar.xz
+Source0: https://download.gnome.org/sources/libsoup/3.6/libsoup-%{version}.tar.xz
 
 BuildRequires: gcc
 BuildRequires: gettext
@@ -109,6 +109,9 @@ install -m 644 -D tests/libsoup.supp %{buildroot}%{_datadir}/libsoup-3.0/libsoup
 %doc README NEWS AUTHORS
 
 %changelog
+* Thu May 15 2025 mgb01105731 <mgb01105731@alibaba-inc.com> - 3.6.5-1
+- update to 3.6.5 to fix CVE-2025-32914 CVE-2025-32906 CVE-2025-32908 CVE-2025-32913 CVE-2025-2784
+
 * Mon Dec 16 2024 yangxinyu <yangxinyu@nfschina.com> - 3.6.1-1
 - New version 3.6.1