diff --git a/rust.spec b/rust.spec
index 273de4e93bbdd2905ebe1eb26210ac252d859a94..5ba019a45eb9ad808efe78b1a40bffc78f894ab4 100644
--- a/rust.spec
+++ b/rust.spec
@@ -1,7 +1,7 @@
 %define anolis_release 1
 
 Name:           rust
-Version:        1.77.0
+Version:        1.77.2
 Release:        %{anolis_release}%{?dist}
 Summary:        The Rust Programming Language
 License:        (Apache-2.0 OR MIT) AND (Artistic-2.0 AND BSD-3-Clause AND ISC AND MIT AND MPL-2.0 AND Unicode-DFS-2016)
@@ -986,6 +986,9 @@ rm -rf "./build/%{rust_triple}/stage2-tools/%{rust_triple}/cit/"
 
 
 %changelog
+*Wed Jun  05 2024 lidongyue <dongyue@nfschina.com> - 1.77.2-1
+- Fix CVE-2024-24576
+
 * Tue Mar 26 2024 mgb01105731 <mgb01105731@alibaba-inc.com> - 1.77.0-1
 - Update to 1.77.0
 
diff --git a/rustc-1.77.0-src.tar.xz b/rustc-1.77.2-src.tar.xz
similarity index 88%
rename from rustc-1.77.0-src.tar.xz
rename to rustc-1.77.2-src.tar.xz
index 03bd53c63fcc216009003fc6b11b5b9bd0d7bf1c..ed7d5176f3ff1514be8dd2c2c46c4a81bd073645 100644
Binary files a/rustc-1.77.0-src.tar.xz and b/rustc-1.77.2-src.tar.xz differ