diff --git a/fence-agents.spec b/fence-agents.spec
index 1e597cc..91c0e62 100644
--- a/fence-agents.spec
+++ b/fence-agents.spec
@@ -11,7 +11,7 @@
 # alibaba
 # python-pycryptodome bundle
 %global pycryptodome		pycryptodome
-%global pycryptodome_version	3.6.4
+%global pycryptodome_version	3.19.1
 %global pycryptodome_dir	%{bundled_lib_dir}/aliyun/%{pycryptodome}
 # python-aliyun-sdk-core bundle
 %global aliyunsdkcore		aliyun-python-sdk-core
@@ -29,7 +29,7 @@
 Name: fence-agents
 Summary: Set of unified programs capable of host isolation ("fencing")
 Version: 4.2.1
-Release: 35
+Release: 36
 License: GPLv2+ and LGPLv2+ and ASL 2.0 and BSD and MIT and Python-2.0 and Artistic-1.0-Perl
 Group: System Environment/Base
 URL: https://github.com/ClusterLabs/fence-agents
@@ -966,6 +966,9 @@ Fence agent for IBM z/VM over IP.
 %endif
 
 %changelog
+* Tue Sep 10 2024 bizhiyuan <bizhiyuan@kylinos.cn> - 4.2.1-36
+- update python-pycryptodome source for CVE-2023-52323
+
 * Wed Jan 18 2023 yangzhao_kl <yangzhao1@kylinos.cn> - 4.2.1-35
 - update require to python3-suds2
 
diff --git a/pycryptodome-3.19.1.tar.gz b/pycryptodome-3.19.1.tar.gz
new file mode 100644
index 0000000..3cff4ac
Binary files /dev/null and b/pycryptodome-3.19.1.tar.gz differ
diff --git a/pycryptodome-3.6.4.tar.gz b/pycryptodome-3.6.4.tar.gz
deleted file mode 100644
index 0568099..0000000
Binary files a/pycryptodome-3.6.4.tar.gz and /dev/null differ