diff --git a/sudo-1.9.10.tar.gz b/sudo-1.9.12p1.tar.gz
similarity index 37%
rename from sudo-1.9.10.tar.gz
rename to sudo-1.9.12p1.tar.gz
index 03396b2f6bfcad9249236bce13b4a8ebec70d4db..a3488fddac4bfa7f6952951016a39fc12619dff9 100644
Binary files a/sudo-1.9.10.tar.gz and b/sudo-1.9.12p1.tar.gz differ
diff --git a/sudo.spec b/sudo.spec
index ed9f29f83f838d4aa38c836ef4470f65b7ad02d0..64e313a45ec501e8ded2df291c3df2768664b8f0 100644
--- a/sudo.spec
+++ b/sudo.spec
@@ -1,7 +1,7 @@
-%define anolis_release 2
+%define anolis_release 1
 Summary: Allows restricted root access for specified users
 Name: sudo
-Version: 1.9.10
+Version: 1.9.12p1
 Release: %{anolis_release}%{?dist}
 License: ISC
 URL: https://www.sudo.ws
@@ -26,7 +26,7 @@ BuildRequires: zlib-devel
 Sudo (superuser do) allows a system administrator to give certain
 users (or groups of users) the ability to run some (or all) commands
 as root while logging all commands and arguments. Sudo operates on a
-per-command basis.  It is not a replacement for the shell.  Features
+per-command basis.  It is not a replacement for the shell. Features
 include: the ability to restrict what commands a user may run on a
 per-host basis, copious logging of each command (providing a clear
 audit trail of who did what), a configurable timeout of the sudo
@@ -68,11 +68,7 @@ BuildRequires:  python3-devel
 # Remove bundled copy of zlib
 rm -rf zlib/
 
-%ifarch s390 s390x sparc64
-F_PIE=-fPIE
-%else
 F_PIE=-fpie
-%endif
 
 export CFLAGS="$RPM_OPT_FLAGS $F_PIE" LDFLAGS="-pie -Wl,-z,relro -Wl,-z,now"
 
@@ -81,7 +77,7 @@ export CFLAGS="$RPM_OPT_FLAGS $F_PIE" LDFLAGS="-pie -Wl,-z,relro -Wl,-z,now"
         --sbindir=%{_sbindir} \
         --libdir=%{_libdir} \
         --docdir=%{_pkgdocdir} \
-	--enable-openssl \
+        --enable-openssl \
         --disable-root-mailer \
         --disable-intercept \
         --with-logging=syslog \
@@ -95,8 +91,8 @@ export CFLAGS="$RPM_OPT_FLAGS $F_PIE" LDFLAGS="-pie -Wl,-z,relro -Wl,-z,now"
         --with-ldap \
         --with-selinux \
         --with-passprompt="[sudo] password for %p: " \
-	--enable-python \
-	--enable-zlib=system \
+        --enable-python \
+        --enable-zlib=system \
         --with-linux-audit \
         --with-sssd
 #       --without-kerb5 \
@@ -106,6 +102,8 @@ make
 %check
 make check
 
+%generate_compatibility_deps
+
 %install
 rm -rf $RPM_BUILD_ROOT
 make install DESTDIR="$RPM_BUILD_ROOT" install_uid=`id -u` install_gid=`id -g` sudoers_uid=`id -u` sudoers_gid=`id -g`
@@ -162,7 +160,6 @@ session    optional     pam_keyinit.so force revoke
 session    include      sudo
 EOF
 
-
 %files -f sudo_all.lang
 %defattr(-,root,root)
 %attr(0440,root,root) %config(noreplace) /etc/sudoers
@@ -185,7 +182,6 @@ EOF
 %attr(0644,root,root) %{_libexecdir}/sudo/sudoers.so
 %attr(0644,root,root) %{_libexecdir}/sudo/audit_json.so
 %attr(0644,root,root) %{_libexecdir}/sudo/group_file.so
-%attr(0644,root,root) %{_libexecdir}/sudo/sample_approval.so
 %attr(0644,root,root) %{_libexecdir}/sudo/system_group.so
 %attr(0644,root,root) %{_libexecdir}/sudo/libsudo_util.so.?.?.?
 %{_libexecdir}/sudo/libsudo_util.so.?
@@ -197,33 +193,44 @@ EOF
 %{_mandir}/man8/sudoedit.8*
 %{_mandir}/man8/sudoreplay.8*
 %{_mandir}/man8/visudo.8*
-%{_mandir}/man1/cvtsudoers.1.gz
-%{_mandir}/man5/sudoers_timestamp.5.gz
+%{_mandir}/man1/cvtsudoers.1.zst
+%{_mandir}/man5/sudoers_timestamp.5.zst
 %dir %{_pkgdocdir}/
 %{_pkgdocdir}/*
 %{!?_licensedir:%global license %%doc}
 %license LICENSE.md
 %exclude %{_pkgdocdir}/ChangeLog
+%{abidir}/sudo_noexec.dump
+%{abidir}/sudoers.dump
+%{abidir}/audit_json.dump
+%{abidir}/group_file.dump
+%{abidir}/libsudo_util.dump
+%{abidir}/system_group.dump
 
 %files devel
 %doc plugins/sample/sample_plugin.c
 %{_includedir}/sudo_plugin.h
-%{_mandir}/man8/sudo_plugin.8*
+%{_mandir}/man5/sudo_plugin.5.zst
 
 %files logsrvd
 %attr(0640,root,root) %config(noreplace) /etc/sudo_logsrvd.conf
 %attr(0755,root,root) %{_sbindir}/sudo_logsrvd
 %attr(0755,root,root) %{_sbindir}/sudo_sendlog
-%{_mandir}/man5/sudo_logsrv.proto.5.gz
-%{_mandir}/man5/sudo_logsrvd.conf.5.gz
-%{_mandir}/man8/sudo_logsrvd.8.gz
-%{_mandir}/man8/sudo_sendlog.8.gz
+%{_mandir}/man5/sudo_logsrv.proto.5.zst
+%{_mandir}/man5/sudo_logsrvd.conf.5.zst
+%{_mandir}/man8/sudo_logsrvd.8.zst
+%{_mandir}/man8/sudo_sendlog.8.zst
 
 %files python-plugin
-%{_mandir}/man8/sudo_plugin_python.8.gz
+%{_mandir}/man5/sudo_plugin_python.5.zst
 %attr(0644,root,root) %{_libexecdir}/sudo/python_plugin.so
+%{abidir}/python_plugin.dump
 
 %changelog
+* Wed Nov 23 2022 Kun(llfl) <llfl@linux.alibaba.com> - 1.9.12p1-1
+- upgrade version to 1.9.12p1 (stable verson in which CVE-2022-43995 fixed).
+- spec optimization.
+
 * Wed Mar 23 2022 Chunmei Xu <xuchunmei@linux.alibaba.com> - 1.9.10-2
 - remove weak dependency