diff --git a/nginx.spec b/nginx.spec
index 3b32216457ed8ca0888678e565eaaf4e9903ec47..f32fb22bad1ba9b47102df8b41d2e78e1dee8229 100644
--- a/nginx.spec
+++ b/nginx.spec
@@ -23,7 +23,7 @@
 
 
 Name:              nginx
-Version: 1.25.4
+Version: 1.26.1
 Release: 1%{?dist}
 Summary:           A high performance web server and reverse proxy server
 License:           BSD
@@ -487,6 +487,10 @@ fi
 
 
 %changelog
+* Tue Jun 11 2024 jackeyji <jackeyji@tencent.com> - 1.26.1-1
+- [Type] security
+- [DESC] upgrade to 1.26.1 to fix CVE-2024-34161 CVE-2024-35200 CVE-2024-31079 and CVE-2024-32760
+
 * Sun Feb 18 2024 jackeyji <jackeyji@tencent.com> - 1.25.4-1
 - upgrade to 1.25.4
 
diff --git a/sources b/sources
index 4694d9f4335b2c089d128d47d57e40b16ccc4a49..1c095af0ed65408fc7d094eefb6fea8ff6981981 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (nginx-1.25.4.tar.gz) = 72a4aa8ed675f5a27ac723a73e556bbb5ae979a2fe79f9c2f4fb20bd7e719c797af8e2868044b7f2cf58be2a351a268599c8eb1e66719098d4142abab7632bb5
+SHA512 (nginx-1.26.1.tar.gz) = dfaadde78eb5cf8c8c3a43ead9ac49fc852c8de3e70e69754e3ffafc88c50c8bc08cdac0cc0ba8a9d8c155bdb334865e2e6c7dc1144c79959c426a9e087b3e37