diff --git a/python-virtualenv.spec b/python-virtualenv.spec
index 5d104805675042261790bb08503b609de1930609..9b667393155a58a3dd7db6d4eb4b07f4f87e3d79 100644
--- a/python-virtualenv.spec
+++ b/python-virtualenv.spec
@@ -1,6 +1,6 @@
 %global pypi_name virtualenv
 Name:           python-%{pypi_name}
-Version:        20.24.4
+Version:        20.26.6
 Release:        1
 Summary:        A tool to create isolated Python environments
 License:        MIT
@@ -60,6 +60,9 @@ sed -i "s/^version_tuple = /__version_tuple__ = version_tuple = /g" ${ver_pyfile
 %{python3_sitelib}/%{pypi_name}*.dist-info/
 
 %changelog
+* Wed Nov 27 2024 yaoxin <yao_xin001@hoperun.com> - 20.26.6-1
+- Update to 20.26.6 for fix CVE-2024-53899
+
 * Mon Jan 15 2024 xu_ping <707078654@qq.com.com> - 20.24.4-1
 - update version to 20.24.4
 
diff --git a/virtualenv-20.24.4.tar.gz b/virtualenv-20.26.6.tar.gz
similarity index 56%
rename from virtualenv-20.24.4.tar.gz
rename to virtualenv-20.26.6.tar.gz
index d2f75a6820d8f17cba758713cecf3ac1262b8065..294cf4f27e97b05f4a49e8af57b363763aeb35ce 100644
Binary files a/virtualenv-20.24.4.tar.gz and b/virtualenv-20.26.6.tar.gz differ