diff --git a/deepin-reader-5.9.9.2.tar.gz b/deepin-reader-5.9.9.2.tar.gz
deleted file mode 100644
index ac32c6532cfb9118cd56f2d8568304445e28e62f..0000000000000000000000000000000000000000
Binary files a/deepin-reader-5.9.9.2.tar.gz and /dev/null differ
diff --git a/deepin-reader-6.0.7.tar.gz b/deepin-reader-6.0.7.tar.gz
new file mode 100644
index 0000000000000000000000000000000000000000..a55bba1f3ed4108f5ce2285f6849126033a7cdd8
Binary files /dev/null and b/deepin-reader-6.0.7.tar.gz differ
diff --git a/deepin-reader.spec b/deepin-reader.spec
index c2cb4ad72425db8539a1117cafd1baeec74ba7f2..f0d408aba808430422ae4454e7e5f0edd1271482 100644
--- a/deepin-reader.spec
+++ b/deepin-reader.spec
@@ -5,8 +5,8 @@
 %global debug_package   %{nil}
 
 Name:           deepin-reader
-Version:        5.9.9.2
-Release:        2.%{anolis_release}%{?dist}
+Version:        6.0.7
+Release:        1.%{anolis_release}%{?dist}
 Summary:        A simple PDF reader, supporting bookmarks, highlights and annotations
 License:        GPLv3+
 URL:            https://github.com/linuxdeepin/%{name}
@@ -31,12 +31,9 @@ BuildRequires: nspr-devel
 BuildRequires: fontconfig-devel
 BuildRequires: lcms2-devel
 BuildRequires: libX11-devel
-# BuildRequires: libicu-devel
-# BuildRequires: libpng-devel
-# BuildRequires: zlib-devel
-# BuildRequires: gtest-devel
-# BuildRequires: libchardet-devel
-
+BuildRequires: gtest-devel
+BuildRequires: libchardet-devel
+BuildRequires: qt5-qtwebengine-devel
 
 
 %description
@@ -63,11 +60,14 @@ popd
 %{_datadir}/icons/hicolor/scalable/apps/%{name}.svg
 %{_datadir}/%{name}/translations/*.qm
 %{_datadir}/applications/%{name}.desktop
-# /usr/lib/libdeepin-pdfium.*
+/usr/lib/libdeepin-pdfium.*
 %{_datadir}/deepin-manual/manual-assets/application/deepin-reader/document-viewer/*
-/usr/lib/deepin-reader/libdeepin-poppler*
+/usr/lib/deepin-reader/htmltopdf
 
 %changelog
+* Thu Mar 05 2026 lzq11122 <lzq02303433@alibaba-inc.com> - 6.0.7-1.0.1
+- Update to 6.0.7 to fix cve CVE-2023-50254
+
 * Tue Jan 09 2024 yangxianzhao <yangxianzhao@uniontech.com> - 5.9.9.2-2.1
 - fix build error