diff --git a/.gitignore b/.gitignore
index 5f36f3a..5d1322e 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1 +1 @@
-SOURCES/qatengine-1.9.0.tar.gz
+SOURCES/qatengine-2.0.0.tar.gz
diff --git a/.qatengine.metadata b/.qatengine.metadata
index 9120f31..6e18cc4 100644
--- a/.qatengine.metadata
+++ b/.qatengine.metadata
@@ -1 +1 @@
-596d5024e66e75a553366ab10608670f46bc7449 SOURCES/qatengine-1.9.0.tar.gz
+b17cfb1a857c16ea67035d580623e0f45f79624d SOURCES/qatengine-2.0.0.tar.gz
diff --git a/SOURCES/fortify-source-3.patch b/SOURCES/fortify-source-3.patch
new file mode 100644
index 0000000..0ce1b8d
--- /dev/null
+++ b/SOURCES/fortify-source-3.patch
@@ -0,0 +1,11 @@
+--- configure.ac.orig	2026-01-24 22:55:47.111990648 +0100
++++ configure.ac	2026-01-24 22:56:12.351441492 +0100
+@@ -537,7 +537,7 @@ then
+ fi
+ 
+ # Compiler security flags
+-AC_SUBST([cflags_common], ["-Wall -Wformat -Wformat-security -D_FORTIFY_SOURCE=2 -fno-delete-null-pointer-checks -fwrapv -fstack-protector-strong"])
++AC_SUBST([cflags_common], ["-Wall -Wformat -Wformat-security -D_FORTIFY_SOURCE=3 -fno-delete-null-pointer-checks -fwrapv -fstack-protector-strong"])
+ 
+ # Disable insecure algorithms by default
+ if test "x$enable_qat_insecure_algorithms" = "xyes"
diff --git a/SPECS/qatengine.spec b/SPECS/qatengine.spec
index 5597663..f2a0a8a 100644
--- a/SPECS/qatengine.spec
+++ b/SPECS/qatengine.spec
@@ -13,13 +13,12 @@
 %endif
 
 Name:           qatengine
-Version:        1.9.0
+Version:        2.0.0
 Release:        1%{?dist}
 Summary:        Intel QuickAssist Technology (QAT) OpenSSL Engine
 
 # Most of the source code is BSD, with the following exceptions:
 # - qat.txt, qat_err.h & qat_err.c files are Apache License 2.0
-# - qat_hw_config/* is (BSD or GPLv2) and not used during compilation
 License:        BSD-3-Clause
 URL:            https://github.com/intel/QAT_Engine
 Source0:        %{url}/archive/v%{version}/%{name}-%{version}.tar.gz
@@ -39,6 +38,8 @@ BuildRequires:  intel-ipsec-mb-devel >= 2.0
 %endif
 BuildRequires:  openssl
 
+Patch1: fortify-source-3.patch
+
 %description
 This package provides the Intel QuickAssist Technology OpenSSL Engine
 (an OpenSSL Plug-In Engine) which provides cryptographic acceleration
@@ -79,6 +80,9 @@ openssl engine -v %{name}
 %endif
 
 %changelog
+* Fri Jan 23 2026 Vladislav Dronov <vdronov@redhat.com> - 2.0.0-1
+- Update to qatengine v2.0.0 @ 4498412a (RHEL-143913)
+
 * Mon Apr 28 2025 Vladis Dronov <vdronov@redhat.com> - 1.9.0-1
 - Update to qatengine v1.9.0 @ 910240d9 (RHEL-73089)
 - Update e_qat_err files license info