diff --git a/haproxy-2.0.17.tar.gz b/haproxy-2.0.17.tar.gz
deleted file mode 100644
index 58836495e17114818a9727af9ecd0782dc03ba7c..0000000000000000000000000000000000000000
Binary files a/haproxy-2.0.17.tar.gz and /dev/null differ
diff --git a/haproxy-2.2.16.tar.gz b/haproxy-2.2.16.tar.gz
new file mode 100644
index 0000000000000000000000000000000000000000..c74ad3fc3ffbfc3caf465b4b2ebc84fe0e841165
Binary files /dev/null and b/haproxy-2.2.16.tar.gz differ
diff --git a/haproxy.spec b/haproxy.spec
index 703c3df8d86973d1761b688383e69100abb71303..3115b6c9451f84d91e3d0b21929aa298d7f588c2 100644
--- a/haproxy.spec
+++ b/haproxy.spec
@@ -4,13 +4,13 @@
 %global _hardened_build   1
 
 Name:             haproxy
-Version:          2.0.17
+Version:          2.2.16
 Release:          1
 Summary:          The Reliable, High Performance TCP/HTTP Load Balancer
 
 License:          GPLv2+
 URL:              https://www.haproxy.org/
-Source0:          https://www.haproxy.org/download/2.0/src/%{name}-%{version}.tar.gz
+Source0:          https://www.haproxy.org/download/2.2/src/%{name}-%{version}.tar.gz
 Source1:          %{name}.service
 Source2:          %{name}.cfg
 Source3:          %{name}.logrotate
@@ -122,6 +122,9 @@ exit 0
 %{_mandir}/man1/*
 
 %changelog
+* Tue Aug 31 2021 yaoxin <yaoxin30@huawei.com> - 2.2.16-1
+- Upgrade 2.2.16 to fix CVE-2021-39240-to-CVE-2021-39242
+
 * Tue Sep 15 2020 Ge Wang <wangge20@huawei.com> - 2.0.17-1
 - update to 2.0.17 and modify source0 url