diff --git a/git-lfs-v3.6.0.tar.gz b/git-lfs-v3.6.0.tar.gz
deleted file mode 100644
index 4dacf03e5becc153ef1554712584a42f3b692540..0000000000000000000000000000000000000000
Binary files a/git-lfs-v3.6.0.tar.gz and /dev/null differ
diff --git a/git-lfs-v3.6.1.tar.gz b/git-lfs-v3.6.1.tar.gz
new file mode 100644
index 0000000000000000000000000000000000000000..0f47bec4985f22e3c9bc89e9ea9eee8fcf01afb4
Binary files /dev/null and b/git-lfs-v3.6.1.tar.gz differ
diff --git a/git-lfs.spec b/git-lfs.spec
index a7bde029618fdda2f39184d5a93c44c749b56787..e8f61202279096b91f3035965845cac60314008f 100644
--- a/git-lfs.spec
+++ b/git-lfs.spec
@@ -3,7 +3,7 @@
 
 # https://github.com/git-lfs/git-lfs
 Name:           git-lfs
-Version:        3.6.0
+Version:        3.6.1
 Release:        1
 Summary:        Git extension for versioning large files
 
@@ -31,9 +31,8 @@ storing the file contents on a remote server.
 
 
 %prep
-%setup 
-%patch -P 6000
-tar zxvf %{SOURCE1}
+%autosetup -p0 -n %{name}-%{version} -a 1
+
 cd ..
 mv %{name}-%{version} %{name}
 mkdir -p %{name}-%{version}/src/github.com/git-lfs
@@ -56,6 +55,10 @@ install -Dpm0755 src/github.com/git-lfs/git-lfs/bin/git-lfs %{buildroot}%{_bindi
 
 
 %changelog
+* Sun Jan 19 2025 Funda Wang <fundawang@yeah.net> - 3.6.1-1
+- Upgrade to 3.6.1
+  - fix CVE-2024-53263: Git LFS permits retrieval of credentials via crafted HTTP URLs
+
 * Tue Jan 14 2025 Xinwei Hu <shinwell_hu@openeuler.sh> - 3.6.0-1
 - Upgrade to 3.6.0
   - Support multi-stage authentication with Git credential helpers and relative worktree paths