diff --git a/python-xmltodict.spec b/python-xmltodict.spec
index d466cb1a6701db7d8b1121557efe9db707fc4e9f..ac5ed6f4f4d8807e96ae27e3e6b0463f008b85b8 100644
--- a/python-xmltodict.spec
+++ b/python-xmltodict.spec
@@ -1,12 +1,12 @@
 %bcond_with bootstrap
 
 Name:           python-xmltodict
-Version:        1.0.0
+Version:        1.0.2
 Release:        1
 Summary:        Python module that makes working with XML feel like you are working with JSON 
 License:        MIT
 URL:            https://github.com/martinblech/xmltodict
-Source0:        %{pypi_source xmltodict}
+Source0:        https://files.pythonhosted.org/packages/source/x/xmltodict/xmltodict-%{version}.tar.gz
 
 BuildArch:      noarch
 
@@ -42,6 +42,9 @@ Python module that makes working with XML feel like you are working with JSON
 
 
 %changelog
+* Tue Dec 02 2025 zhangzeyang0718 <zhangzeyang@kylinos.cn> - 1.0.2-1
+- Update to 1.0.2
+
 * Wed Sep 17 2025 yaoxin <1024769339@qq.com> - 1.0.0-1
 - Update to 1.0.0 for fix CVE-2025-9375
 
diff --git a/xmltodict-1.0.0.tar.gz b/xmltodict-1.0.0.tar.gz
deleted file mode 100644
index e1f7bb863ce5a2cb59a3006ee070ea3f9ce034fa..0000000000000000000000000000000000000000
Binary files a/xmltodict-1.0.0.tar.gz and /dev/null differ
diff --git a/xmltodict-1.0.2.tar.gz b/xmltodict-1.0.2.tar.gz
new file mode 100644
index 0000000000000000000000000000000000000000..e30ea734e748f5c8b7fa3020ecad2921b808c6e0
Binary files /dev/null and b/xmltodict-1.0.2.tar.gz differ