diff --git a/python-urllib3.spec b/python-urllib3.spec
index e6f41d4fc172637115b2c524aa90212af2ee991b..7531b4ea78ca17855db3c5fbf91570ee48bf40ab 100644
--- a/python-urllib3.spec
+++ b/python-urllib3.spec
@@ -2,10 +2,10 @@
 
 %bcond_with tests
 
-Summary:        Python HTTP library with thread-safe connection pooling and file post
+Summary:        Python HTTP library with thread-safe connection pooling, file post, and more
 Name:           python-%{srcname}
-Version:        1.26.18
-Release:        3%{?dist}
+Version:        1.26.19
+Release:        1%{?dist}
 License:        MIT
 URL:            https://github.com/urllib3/urllib3
 Source0:        %{url}/archive/%{version}/%{srcname}-%{version}.tar.gz
@@ -38,11 +38,6 @@ user friendly, and more.
 recent_date=$(date --date "7 month ago" +"%Y, %_m, %_d")
 sed -i "s/^RECENT_DATE = datetime.date(.*)/RECENT_DATE = datetime.date($recent_date)/" src/urllib3/connection.py
 
-rm -rf test/with_dummyserver/
-rm -rf test/appengine/
-rm -rf test/contrib/
-rm -f test/test_no_ssl.py
-
 sed -i -e 's/^import mock/from unittest import mock/' \
        -e 's/^from mock import /from unittest.mock import /' \
     test/*.py docs/conf.py
@@ -65,7 +60,11 @@ ln -s %{python3_sitelib}/__pycache__/six.cpython-%{python3_version_nodots}.pyc \
 
 %if %{with tests}
 %check
-%pytest -v
+ignore="${ignore-} --ignore=test/with_dummyserver/"
+ignore="${ignore-} --ignore=test/appengine/"
+ignore="${ignore-} --ignore=test/contrib/"
+ignore="${ignore-} --ignore=test/test_no_ssl.py"
+%pytest -v ${ignore-}
 %endif
 
 %files -n python3-%{srcname}
@@ -75,6 +74,10 @@ ln -s %{python3_sitelib}/__pycache__/six.cpython-%{python3_version_nodots}.pyc \
 %{python3_sitelib}/urllib3-*.egg-info/
 
 %changelog
+* Thu Oct 10 2024 Ze Zhang <bbrucezhang@tencent.com> - 1.26.19-1
+- [Type] security
+- [DESC] Update to 1.26.19 to fix CVE-2024-37891
+
 * Thu Sep 26 2024 OpenCloudOS Release Engineering <releng@opencloudos.tech> - 1.26.18-3
 - Rebuilt for clarifying the packages requirement in BaseOS and AppStream
 
diff --git a/sources b/sources
index 66ed1d0d02a3f09eda13eff8605b95838a8d3fc0..010dd3dcdb01c695b99d98ed79e4d4a6c2f6d11e 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (urllib3-1.26.18.tar.gz) = c89e93a032bf6b11375c06ef7c5abc1868f93e7655cfdca09e9bd939ad415d206ea159fe151ecd2e5f725e0e18a831c7a5382ad01dbc32264154fc8af7aec156
+SHA512 (urllib3-1.26.19.tar.gz) = 6b72012dbd85434b2441229cbdea2a94583693f904dde349780e1290d581c8a5e10fe00a287a032ed1276349d0078b530f16a133e0f164dcea18105fa3dec79a