diff --git a/libreswan.spec b/libreswan.spec
index 5453bccfe8e527447d65d25771a03cff2c2b02c5..c0039f05d381a1baa0aa419a0a4f9d0c639964d0 100644
--- a/libreswan.spec
+++ b/libreswan.spec
@@ -30,7 +30,7 @@
 Name: libreswan
 Summary: Internet Key Exchange (IKEv1 and IKEv2) implementation for IPsec
 # version is generated in the release script
-Version: 4.11
+Version: 4.12
 Release: %{anolis_release}%{?dist}
 License: GPLv2
 Url: https://libreswan.org/
@@ -199,6 +199,9 @@ certutil -N -d sql:$tmpdir --empty-password
 %doc docs/*.*
 
 %changelog
+* Sat Oct 07 2023 Xiaoping Liu <lxp01404969@alibaba-inc.com> - 4.12-1
+- Update to 4.12 for CVE-2023-38710, CVE-2023-38711 and CVE-2023-38712
+
 * Mon May 29 2023 Funda Wang <fundawang@yeah.net> - 4.11-1
 - New version 4.11
 
diff --git a/v4.11.tar.gz b/v4.12.tar.gz
similarity index 35%
rename from v4.11.tar.gz
rename to v4.12.tar.gz
index 0ffefbd300aef6ba353539bc048121690ab1398f..2b8b9778e297ee749f32652386251c9c15e3149e 100644
Binary files a/v4.11.tar.gz and b/v4.12.tar.gz differ