diff --git a/pmix-4.2.4.tar.bz2 b/pmix-4.2.4.tar.bz2
deleted file mode 100644
index e35aa8e..0000000
Binary files a/pmix-4.2.4.tar.bz2 and /dev/null differ
diff --git a/pmix-4.2.6.tar.bz2 b/pmix-4.2.6.tar.bz2
new file mode 100644
index 0000000..7a0bcd5
Binary files /dev/null and b/pmix-4.2.6.tar.bz2 differ
diff --git a/pmix.spec b/pmix.spec
index 54e5287..ec404a8 100644
--- a/pmix.spec
+++ b/pmix.spec
@@ -1,5 +1,5 @@
 Name:           pmix
-Version:        4.2.4
+Version:        4.2.6
 Release:        1
 Summary:        Process Management Interface Exascale (PMIx)
 License:        BSD
@@ -72,6 +72,9 @@ find src -name \*.l -print -exec touch --no-create {} \;
 %{_bindir}/*
 
 %changelog
+* Mon Sep 18 2023 yaoxin <yao_xin001@hoperun.com> - 4.2.6-1
+- Update to 4.2.6 for fix CVE-2023-41915
+
 * Wed Jul 26 2023 yaoxin <yao_xin001@hoperun.com> - 4.2.4-1
 - Update to 4.2.4