diff --git a/mysql-arm32-timer.patch b/mysql-arm32-timer.patch
deleted file mode 100644
index bbfc560897521ad5b861f257cdd8ffc3436d8b91..0000000000000000000000000000000000000000
--- a/mysql-arm32-timer.patch
+++ /dev/null
@@ -1,14 +0,0 @@
---- mysql-8.0.24/mysql-test/include/mtr_warnings.sql.orig	2021-04-18 18:04:05.166312799 +0200
-+++ mysql-8.0.24/mysql-test/include/mtr_warnings.sql	2021-04-18 18:04:23.605495467 +0200
-@@ -308,6 +308,11 @@
-  */
-  ("Manifest file '.*' is not read-only. For better security, please make sure that the file is read-only."),
- 
-+ /*
-+   ARM32 don't support timers and get this warning in every test.
-+ */
-+ ("The CYCLE timer is not available. WAIT events in the performance_schema will not be timed."),
-+
-  ("THE_LAST_SUPPRESSION");
- 
- 
diff --git a/mysql-boost-8.0.24.tar.gz b/mysql-boost-8.0.24.tar.gz
deleted file mode 100644
index ce09475dd9fef218cb1bb93e7ba863dfa3cadeab..0000000000000000000000000000000000000000
Binary files a/mysql-boost-8.0.24.tar.gz and /dev/null differ
diff --git a/mysql-boost-8.0.24.tar.gz.ab b/mysql-boost-8.0.24.tar.gz.ab
deleted file mode 100644
index 1b071c7ed1f2c34a0d70e4b0326d9d18d0947e36..0000000000000000000000000000000000000000
Binary files a/mysql-boost-8.0.24.tar.gz.ab and /dev/null differ
diff --git a/mysql-boost-8.0.24.tar.gz.ac b/mysql-boost-8.0.24.tar.gz.ac
deleted file mode 100644
index d9ea600360b9c01046ccc42deb0ea067209f0256..0000000000000000000000000000000000000000
Binary files a/mysql-boost-8.0.24.tar.gz.ac and /dev/null differ
diff --git a/mysql-boost-8.0.24.tar.gz.aa b/mysql-boost-8.0.26.tar.gz
similarity index 34%
rename from mysql-boost-8.0.24.tar.gz.aa
rename to mysql-boost-8.0.26.tar.gz
index 3fc0d2a57ce94ce4d36196aa3cc7bc891d6ecc10..e48b2c877aac6211f955fce0f8bac4ecbc8d75b8 100644
Binary files a/mysql-boost-8.0.24.tar.gz.aa and b/mysql-boost-8.0.26.tar.gz differ
diff --git a/mysql.spec b/mysql.spec
index 21a245dca2539e6dfcc6a67cc9e90536baf2e402..7d1ffeac76045ec013b6adc5e51f3871ca1598c6 100644
--- a/mysql.spec
+++ b/mysql.spec
@@ -6,15 +6,12 @@
 %global pkgnamepatch mysql
 %global boost_bundled_version 1.73.0
 Name:              mysql
-Version:           8.0.24
-Release:           2
+Version:           8.0.26
+Release:           1
 License:           GPLv2 with exceptions and LGPLv2 and BSD
 Summary:           The world's most popular open source database
 URL:               http://www.mysql.com/
-Source0:           https://cdn.mysql.com/archives/%{name}-8.0/%{name}-boost-%{version}.tar.gz 
-Source1:           %{name}-boost-%{version}.tar.gz.aa
-Source2:           %{name}-boost-%{version}.tar.gz.ab
-Source3:           %{name}-boost-%{version}.tar.gz.ac
+Source0:           https://dev.mysql.com/get/Downloads/MySQL-8.0/mysql-boost-%{version}.tar.gz
 Patch0:0000-mysql-add-fstack-protector-strong.patch
 Patch1:%{pkgnamepatch}-install-test.patch
 Patch3:%{pkgnamepatch}-file-contents.patch
@@ -22,7 +19,6 @@ Patch5:%{pkgnamepatch}-paths.patch
 Patch6:%{pkgnamepatch}-chain-certs.patch
 Patch7:%{pkgnamepatch}-sharedir.patch
 Patch8:%{pkgnamepatch}-rpath.patch
-Patch9:%{pkgnamepatch}-arm32-timer.patch
 Patch10:boost-1.58.0-pool.patch
 Patch11:boost-1.57.0-mpl-print.patch
 Patch12:%{pkgnamepatch}-fix-includes-robin-hood.patch
@@ -47,9 +43,6 @@ the GPL. See the chapter "Licensing and Support" in the manual for
 further info.
 
 %prep
-cd ../SOURCES
-cat %{SOURCE1} %{SOURCE2} %{SOURCE3} | tar xj
-cd ..
 %setup -q -n %{name}-%{version}
 %patch0 -p1
 %patch1 -p1
@@ -58,7 +51,6 @@ cd ..
 %patch6 -p1
 %patch7 -p1
 %patch8 -p1
-%patch9 -p1
 %patch12 -p1
 %patch13 -p1
 pushd boost/boost_$(echo %{boost_bundled_version}| tr . _)
@@ -121,6 +113,13 @@ fi
 %exclude /usr/lib/debug
 
 %changelog
+* Fri Sep 24 2021 liwu <liwu13@huawei.com> - 8.0.26-1
+- mysql upgrade to 8.0.26,fix CVE-2021-2342 CVE-2021-2367 CVE-2021-2374 
+  CVE-2021-2372 CVE-2021-2399 CVE-2021-2417 CVE-2021-2387 CVE-2021-2418
+  CVE-2021-2402 CVE-2021-2384 CVE-2021-2425 CVE-2021-2437 CVE-2021-2390 
+  CVE-2021-2370 CVE-2021-2410 CVE-2021-2383 CVE-2021-2385 CVE-2021-2389 
+  CVE-2021-2426 CVE-2021-2427 CVE-2021-2441
+
 * Tue Aug 03 2021 herengui <herengui@uniontech.com> - 8.0.24-2
 - The user mysql should not be deleted when mysql is uninstalled
   Set the mysql user/group to use a fixed uid/gid 27