diff --git a/pmix-4.2.4.tar.bz2 b/pmix-4.2.6.tar.bz2
similarity index 39%
rename from pmix-4.2.4.tar.bz2
rename to pmix-4.2.6.tar.bz2
index e35aa8e29befd92db4613e876cd53aee939319c6..7a0bcd5a9c9f610b320c8c2efd035ef6a73c8b9a 100644
Binary files a/pmix-4.2.4.tar.bz2 and b/pmix-4.2.6.tar.bz2 differ
diff --git a/pmix.spec b/pmix.spec
index 54e5287d5c8e7790b24786369519653faa15ddf1..ec404a8ae4dcb2ad3865b2014d17fcf2ce7c65ef 100644
--- a/pmix.spec
+++ b/pmix.spec
@@ -1,5 +1,5 @@
 Name:           pmix
-Version:        4.2.4
+Version:        4.2.6
 Release:        1
 Summary:        Process Management Interface Exascale (PMIx)
 License:        BSD
@@ -72,6 +72,9 @@ find src -name \*.l -print -exec touch --no-create {} \;
 %{_bindir}/*
 
 %changelog
+* Mon Sep 18 2023 yaoxin <yao_xin001@hoperun.com> - 4.2.6-1
+- Update to 4.2.6 for fix CVE-2023-41915
+
 * Wed Jul 26 2023 yaoxin <yao_xin001@hoperun.com> - 4.2.4-1
 - Update to 4.2.4