diff --git a/hadoop-3.3.4-src.tar.gz b/hadoop-3.3.6-src.tar.gz
similarity index 74%
rename from hadoop-3.3.4-src.tar.gz
rename to hadoop-3.3.6-src.tar.gz
index d3f7af1..520bf79 100644
Binary files a/hadoop-3.3.4-src.tar.gz and b/hadoop-3.3.6-src.tar.gz differ
diff --git a/hadoop.spec b/hadoop.spec
index 11df1ec..495c2b2 100644
--- a/hadoop.spec
+++ b/hadoop.spec
@@ -10,8 +10,8 @@
 %global __provides_exclude_from ^%{_libdir}/%{name}/.*$
 %define _binaries_in_noarch_packages_terminate_build 0
 Name:   hadoop
-Version: 3.3.4
-Release: 4
+Version: 3.3.6
+Release: 1
 Summary: A software platform for processing vast amounts of data
 # The BSD license file is missing
 # https://issues.apache.org/jira/browse/HADOOP-9849
@@ -263,6 +263,7 @@ tar -xzvf ${HOME}/repository/com/github/eirslett/yarn/1.22.5/yarn-1.22.5.tar.gz
 npm config set registry https://repo.huaweicloud.com/repository/npm/
 npm cache clean -f
 ${HOME}/repository/com/github/eirslett/yarn/1.22.5/yarn-v1.22.5/bin/yarn config set registry https://repo.huaweicloud.com/repository/npm/ -g
+${HOME}/repository/com/github/eirslett/yarn/1.22.5/yarn-v1.22.5/bin/yarn config set ignore-engines true
 
 %pom_add_dep org.iq80.leveldb:leveldb-api:0.7 hadoop-hdfs-project/hadoop-hdfs
 %pom_add_dep org.iq80.leveldb:leveldb-api:0.7 hadoop-yarn-project/hadoop-yarn/hadoop-yarn-server/hadoop-yarn-server-web-proxy 
@@ -1132,6 +1133,9 @@ fi
 %config(noreplace) %{_sysconfdir}/%{name}/container-executor.cfg
 
 %changelog
+* Mon Nov 27 2023 wenweijian wenweijian2@huawei.com - 3.3.6-1
+- fix cve CVE-2023-26031 
+
 * Wed Aug 16 2023 Jia Chao <jiac13@chinaunicom.cn> - 3.3.4-4
 - fix: use $HOME rather than /home/abuild, suit for all buildtools.
 - fix: yarn have ELF bin, not noarch at all.