diff --git a/golang.spec b/golang.spec
index 123995cf31448d0c323498b7b6820ac6e5f27d72..b62532775dd5f6575a0d7465efe1113f2f09486d 100644
--- a/golang.spec
+++ b/golang.spec
@@ -63,7 +63,7 @@
 
 Name:           golang
 Version:        1.17.3
-Release:        20
+Release:        21
 Summary:        The Go Programming Language
 License:        BSD and Public Domain
 URL:            https://golang.org/
@@ -197,6 +197,7 @@ Patch6044:	0044-Backport-cmd-go-disallow-package-directories-contain.patch
 Patch6045:	0045-Backport-cmd-go-enforce-flags-with-non-optional-argu.patch
 Patch6046:	0046-Backport-cmd-go-cmd-cgo-in-_cgo_flags-use-one-line-p.patch
 Patch6047:	0047-Backport-net-http-validate-Host-header-before-sendin.patch
+Patch6048:	0048-Backport-net-http-permit-requests-with-invalid-Host-headers.patch
 
 ExclusiveArch:  %{golang_arches}
 
@@ -435,6 +436,9 @@ fi
 %files devel -f go-tests.list -f go-misc.list -f go-src.list
 
 %changelog
+* Fri Aug 25 2023 sunchendong <sunchendong@xfusion.com> - 1.17.3-21
+- permit invalid host header for docker
+
 * Fri Jul 21 2023 hanchao <hanchao63@huawei.com> - 1.17.3-20
 - Type:CVE
 - CVE:CVE-2023-29406