diff --git a/2.10.7.tar.gz b/2.10.11.tar.gz
similarity index 55%
rename from 2.10.7.tar.gz
rename to 2.10.11.tar.gz
index 762cb9a2e3112640bdc6a0dd8ba5d99290ae8099..a34326779e5f4419b5c6a5c36776aa8a1baaf078 100644
Binary files a/2.10.7.tar.gz and b/2.10.11.tar.gz differ
diff --git a/obs-server.spec b/obs-server.spec
index 58a8afc972dc0550cefde7011d53b85970d92962..109327cb526e9532ea8771d0720e8c4ab6fe19b1 100644
--- a/obs-server.spec
+++ b/obs-server.spec
@@ -5,13 +5,13 @@
 
 
 Name:           obs-server
-Version:        2.10.7
-Release:        8
+Version:        2.10.11
+Release:        1
 Summary:        The Open Build Service -- Server Component
 License:        GPL-2.0-only OR GPL-3.0-only
 URL:            http://www.openbuildservice.org
 BuildRoot:      %{_tmppath}/%{name}-%{version}-build
-Source0:        https://github.com/openSUSE/open-build-service/archive/2.10.7.tar.gz
+Source0:        https://github.com/openSUSE/open-build-service/archive/2.10.11.tar.gz
 Source1:        Gemfile.lock
 Patch1:         0001-obs_server-fix-usage-info.patch
 Patch2:         fix-obs_productconvert-inputfile-path.patch
@@ -79,7 +79,7 @@ This is the API server instance, and the web client for the OBS.
 rm -rf src/{api,backend}/docker-files
 rm -rf src/api/Dockerfile.frontend-base
 rm -rf src/backend/build
-#adpate to obs-bundled-gema-2.10.1 because of updating to obs-server-2.10.7
+#adpate to obs-bundled-gema-2.10.1 because of updating to obs-server-2.10.11
 rm -rf src/api/config/brakeman.ignore
 cp %{SOURCE1} src/api/
 
@@ -493,6 +493,10 @@ usermod -a -G docker obsservicerun
 %{_sbindir}/rcobsstoragesetup
 
 %changelog
+* Fri Mar 11 2022 houyingchao <houyingchao@huawei.com> - 2.10.11-1
+- Fix CVE-2020-8031
+- Upgrade to 2.10.11
+
 * Thu Sep 23 2021 lingsheng <lingsheng@huawei.com> - 2.10.7-8
 - fix obsapisetup script problems, modify production.sphinx.conf owner