diff --git a/download b/download
index d71df0e5b68b0000d01075420f3c2067df69e06c..87d30a53644ed5fbc41da18bf07ef39c14d570bc 100644
--- a/download
+++ b/download
@@ -1,2 +1,2 @@
-5c9aec439057888b4d2d66c1dcef9ac1  go1.19.9-1-openssl-fips.tar.gz
-006a7b537b466081f750291ea2ec71e2  go1.19.9.tar.gz
+a2c5d9e50bf967f5505328ddc834ea4e  go1.19.10-1-openssl-fips.tar.gz
+f160792b46c7d1cae99d73fa763bf5e3  go1.19.10.tar.gz
diff --git a/golang.spec b/golang.spec
index a710f2679547d0346505b39c9d4c4a8c54d7b37b..bd7128cab8ce12e34811279cebf0b0619d091906 100644
--- a/golang.spec
+++ b/golang.spec
@@ -97,7 +97,7 @@
 %endif
 
 %global go_api 1.19
-%global version 1.19.9
+%global version 1.19.10
 %global pkg_release 1
 
 Name:           golang
@@ -539,6 +539,9 @@ cd ..
 %endif
 
 %changelog
+* Fri Jun 30 2023 Liwei Ge <liwei.glw@alibaba-inc.com> - 1.19.10-1.0.1
+- update base to  golang 1.19.10 (CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405)
+
 * Tue May 30 2023 Chang Gao <gc-taifu@linux.alibaba.com> - 1.19.9-1.0.1
 - disable DISABLE_BoringCertAlgs_TEST test