diff --git a/perl-5.40.2.tar.xz b/perl-5.40.2.tar.xz
deleted file mode 100644
index f160bd339e288dbf4801f97558d9b2e5cb8c9a72..0000000000000000000000000000000000000000
Binary files a/perl-5.40.2.tar.xz and /dev/null differ
diff --git a/perl-5.42.0.tar.xz b/perl-5.42.0.tar.xz
new file mode 100644
index 0000000000000000000000000000000000000000..e936a8f54107a3d2e67908189ced59c98af60726
--- /dev/null
+++ b/perl-5.42.0.tar.xz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:73cf6cc1ea2b2b1c110a18c14bbbc73a362073003893ffcedc26d22ebdbdd0c3
+size 14400988
diff --git a/perl.spec b/perl.spec
index bcc38d43cbbbdb73f3c98864c894943294287662..53d6b896d80bcca249d8e6b4e6db803756f0e8ea 100644
--- a/perl.spec
+++ b/perl.spec
@@ -18,7 +18,7 @@
 #provides module without verion, no need to provide
 %global __provides_exclude %{?__provides_exclude:%__provides_exclude|}^perl\\((charnames|DynaLoader|DB)\\)$
 
-%global perl_version 5.40.2
+%global perl_version 5.42.0
 
 %global perl_compat perl(:MODULE_COMPAT_5.40.2)
 
@@ -52,7 +52,6 @@ Patch7: perl-5.38.0-Link-XS-modules-to-libperl.so-with-EU-MM.patch
 Patch8: perl-5.38.0-Link-XS-modules-to-libperl.so-with-EU-CBuilder-on-Li.patch
 
 Patch6000: backport-aarch64-ilp32-support.patch
-Patch6001: backport-CVE-2025-40909.patch
 
 BuildRequires:  gcc bash findutils coreutils make tar procps bzip2-devel gdbm-devel perl-File-Compare perl-File-Find 
 BuildRequires:  zlib-devel perl-interpreter perl-generators
@@ -4903,6 +4902,9 @@ make test_harness
 %{_mandir}/man3/*
 
 %changelog
+* Mon Nov 17 2025 dillon chen <dillon.chen@gmail.com> - 4:5.42.0-1
+- upgrade to 5.42.0
+
 * Mon Sep 22 2025 hongjinghao <hongjinghao@huawei.com> - 4:5.40.2-1
 - upgrade to 5.40.2