diff --git a/htslib-1.10.2.tar.gz b/htslib-1.10.2.tar.gz
deleted file mode 100644
index 1e5e428d26d63138d881b05f71e6ffa12168a9dd..0000000000000000000000000000000000000000
Binary files a/htslib-1.10.2.tar.gz and /dev/null differ
diff --git a/htslib-1.11.tar.gz b/htslib-1.11.tar.gz
new file mode 100644
index 0000000000000000000000000000000000000000..b3de40954167969a733ea97424b977bcc1a2507a
Binary files /dev/null and b/htslib-1.11.tar.gz differ
diff --git a/htslib.spec b/htslib.spec
index 534bb5c245369e865a272f514cecdd5cb589f9bb..57643aee4362c7f4c30bbe01bfd7e7fdca16b6ae 100644
--- a/htslib.spec
+++ b/htslib.spec
@@ -1,10 +1,10 @@
 Name:    htslib
-Version: 1.10.2
-Release: 4
+Version: 1.11
+Release: 1
 Summary: C library for high-throughput sequencing data formats
 License: MIT and BSD
 URL:	 http://www.htslib.org
-Source0: https://github.com/samtools/htslib/archive/%{name}-%{version}.tar.gz
+Source0: https://github.com/samtools/htslib/archive/refs/tags/%{version}.tar.gz#/%{name}-%{version}.tar.gz
 
 BuildRequires: 	gcc autoconf automake make curl-devel zlib-devel bzip2-devel xz-devel libxcrypt-devel openssl-devel
 
@@ -36,8 +36,7 @@ the htsfile identifier tool, and the bgzip compression utility.
 
 %prep
 %setup -q -n %{name}-%{version}
-install -p -m 0644 /usr/lib/rpm/%{_vendor}/config.guess config.guess
-install -p -m 0644 /usr/lib/rpm/%{_vendor}/config.sub config.sub
+touch config.guess config.sub
 
 %build
 autoheader
@@ -87,6 +86,9 @@ rm -rf %{buildroot}/%{_libdir}/libhts.a
 %{_mandir}/man1/tabix.1*
 
 %changelog
+* Wed Feb 09 2022 herengui <herengui@uniontech.com> - 1.11-1
+- update to 1.11, new version fixed CVE-2020-36403
+
 * Wed Jan 12 2022 Chen Chen <chen_aka_jan@163.com> - 1.10.2-4
 - fix config.guess and config.sub path error