diff --git a/_service b/_service
index e6fd3ad..0ba906f 100644
--- a/_service
+++ b/_service
@@ -3,7 +3,8 @@
     <param name="url">https://github.com/milesgranger/pyrus-cramjam.git</param>
     <param name="scm">git</param>
     <param name="versionformat">@PARENT_TAG@</param>
-    <param name="revision">master</param>
+    <!-- can change back to master when there are no .post tags on top of the branch -->
+    <param name="revision">v2.6.2</param>
     <param name="versionrewrite-pattern">v(.*)</param>
     <param name="versionrewrite-replacement">\1</param>
   </service>
diff --git a/pyrus-cramjam-2.6.1.tar.xz b/pyrus-cramjam-2.6.1.tar.xz
deleted file mode 100644
index c46cc6a..0000000
--- a/pyrus-cramjam-2.6.1.tar.xz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:5086aa40d28d83418101c4288f0878867f91bc86afadfd0d34a422bfec5e9f20
-size 823908
diff --git a/pyrus-cramjam-2.6.2.tar.xz b/pyrus-cramjam-2.6.2.tar.xz
new file mode 100644
index 0000000..1f8ab5a
--- /dev/null
+++ b/pyrus-cramjam-2.6.2.tar.xz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:724f84ee34903428759970318a0aad0384a1d60b587e5a026f103ee4e6878824
+size 823568
diff --git a/python-cramjam.changes b/python-cramjam.changes
index 4d781af..a774450 100644
--- a/python-cramjam.changes
+++ b/python-cramjam.changes
@@ -1,3 +1,12 @@
+-------------------------------------------------------------------
+Fri Jan 13 11:04:41 UTC 2023 - Ben Greiner <code@bnavigator.de>
+
+- Update to v2.6.2
+  * Bump pyo3, numpy and expand pyproject.toml by @milesgranger in
+    #90
+- Updated crate fixes bzip2 < 0.4.4 vulnerability
+  * boo#1207039, CVE-2023-22895
+
 -------------------------------------------------------------------
 Sat Oct 29 09:30:13 UTC 2022 - Ben Greiner <code@bnavigator.de>
 
diff --git a/python-cramjam.spec b/python-cramjam.spec
index f6b7f31..c13ff69 100644
--- a/python-cramjam.spec
+++ b/python-cramjam.spec
@@ -1,7 +1,7 @@
 #
 # spec file for package python-cramjam
 #
-# Copyright (c) 2022 SUSE LLC
+# Copyright (c) 2023 SUSE LLC
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -16,16 +16,17 @@
 #
 
 
+# Adjust the version in _service and use `rm -rf pyrus-cramjam; osc service runall` in order to update
 Name:           python-cramjam
-Version:        2.6.1
+Version:        2.6.2
 Release:        0
 Summary:        Thin Python bindings to de/compression algorithms in Rust
 License:        MIT
 URL:            https://github.com/milesgranger/pyrus-cramjam
-# use `rm -rf pyrus-cramjam; osc service runall` in order to update
 Source:         pyrus-cramjam-%{version}.tar.xz
 Source1:        vendor.tar.xz
 Source2:        cargo_config
+BuildRequires:  %{python_module base >= 3.7}
 BuildRequires:  %{python_module maturin >= 0.13}
 BuildRequires:  %{python_module pip}
 BuildRequires:  cargo-packaging
@@ -59,6 +60,6 @@ cp %{SOURCE2} .cargo/config
 %files %{python_files}
 %license LICENSE
 %{python_sitearch}/cramjam
-%{python_sitearch}/cramjam-%{version}*-info
+%{python_sitearch}/cramjam-%{version}.dist-info
 
 %changelog
diff --git a/vendor.tar.xz b/vendor.tar.xz
index c843ce3..d623e42 100644
--- a/vendor.tar.xz
+++ b/vendor.tar.xz
@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:5ab99e458e2c9e53e6900297979c1d1f17594de021ae69996daf53f27fa909e9
-size 9716060
+oid sha256:4bba92ceba18de0f9e5d197f7009e40ba50882f817979c9196d3efd75b29c7cf
+size 9890596