diff --git a/haproxy-2.2.1.tar.gz b/haproxy-2.2.1.tar.gz
deleted file mode 100644
index b3b81591baacda2d8e9b9160800c365f0e8e7cfa..0000000000000000000000000000000000000000
Binary files a/haproxy-2.2.1.tar.gz and /dev/null differ
diff --git a/haproxy-2.2.16.tar.gz b/haproxy-2.2.16.tar.gz
new file mode 100644
index 0000000000000000000000000000000000000000..c74ad3fc3ffbfc3caf465b4b2ebc84fe0e841165
Binary files /dev/null and b/haproxy-2.2.16.tar.gz differ
diff --git a/haproxy.spec b/haproxy.spec
index 881942b2c62e398cf92fb4d2814d506038e86646..d64bb2e16f7db104e8d792d4f63324798e1ea75a 100644
--- a/haproxy.spec
+++ b/haproxy.spec
@@ -4,13 +4,13 @@
 %global _hardened_build   1
 
 Name:             haproxy
-Version:          2.2.1
+Version:          2.2.16
 Release:          1
 Summary:          The Reliable, High Performance TCP/HTTP Load Balancer
 
 License:          GPLv2+
 URL:              https://www.haproxy.org/
-Source0:          https://www.haproxy.org/download/2.0/src/%{name}-%{version}.tar.gz
+Source0:          https://www.haproxy.org/download/2.2/src/%{name}-%{version}.tar.gz
 Source1:          %{name}.service
 Source2:          %{name}.cfg
 Source3:          %{name}.logrotate
@@ -123,6 +123,9 @@ exit 0
 %{_mandir}/man1/*
 
 %changelog
+* Wed Sep 1 2021 yaoxin <yaoxin30@huawei.com> - 2.2.16-1
+- Upgrade 2.2.16 to fix CVE-2021-39240-to-CVE-2021-39242
+
 * Thu Fri 13 2021 xu_ping <xuping33@huawei.com> - 2.2.1-1
 - update to 2.2.1