diff --git a/pacemaker.spec b/pacemaker.spec
index 204326bcab55dd75d9f65d77265fdfe2e19ab0dc..3d0f89c465ffabb5a0b0677b196868475f135153 100644
--- a/pacemaker.spec
+++ b/pacemaker.spec
@@ -10,7 +10,7 @@
 
 Summary:       Scalable High-Availability cluster resource manager
 Name:          pacemaker
-Version:       2.1.8
+Version:       2.1.11
 Release:       1%{?dist}
 License:       GPLv2+ and LGPLv2+
 Url:           https://www.clusterlabs.org/
@@ -459,6 +459,10 @@ exit 0
 %dir %{_datadir}/pacemaker/nagios/plugins-metadata
 
 %changelog
+* Thu Jul 09 2026 PkgAgent Robot <pkgagent@opencloudos.tech> - 2.1.11-1
+- [Type] security
+- [DESC] Update to 2.1.11 (fixes CVE-2026-10649)
+
 * Tue Jul 08 2025 Jiaxin Yang <jiaxinyyang@tencent.com> - 2.1.8-1
 - [Type] security
 - [DESC] upgrade to 2.1.8
diff --git a/sources b/sources
index 000c5513bdb4a187443af367d0a5a510b697365b..e0b4fa59caed2d7d30ba7fc42585fd68da5a30c5 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
 SHA512 (nagios-agents-metadata-105ab8a7b2c16b9a29cf1c1596b80136eeef332b.tar.gz) = 11ddeb48a4929e7642b6dfa9c7962aa1d7a1af1c569830f55ed6cd6773abac13377317327bc1db8411c8077884f83f81cc54d746c834b63a99fa6dc219b5caad
-SHA512 (Pacemaker-2.1.8.tar.gz) = c6901620bd8ada02f9a8978d0edf9494e725a28f2b887f6a69676b8ca5c651cdd79ccabec9398672eff49becefaa2508fd5cd964d19e78823b5dafe061a6cd0c
+SHA512 (Pacemaker-2.1.11.tar.gz) = f5ab69913f2702f13fb74505653e9e1e96244d7dad96a61b37ec12d2f1749fc053f5e7ef8d32302a6b97347ace22f1e8c80a290dd49e532661196d034e70555d