diff --git a/libslirp-4.4.0.tar.xz b/libslirp-4.4.0.tar.xz
deleted file mode 100644
index 18b313af93bde3ce3d8b738eeb5902979c1d4b17..0000000000000000000000000000000000000000
Binary files a/libslirp-4.4.0.tar.xz and /dev/null differ
diff --git a/libslirp-4.6.1.tar.xz b/libslirp-4.6.1.tar.xz
new file mode 100644
index 0000000000000000000000000000000000000000..bfd82c6e7f1586cee02d89967a604114838af888
Binary files /dev/null and b/libslirp-4.6.1.tar.xz differ
diff --git a/libslirp.spec b/libslirp.spec
index 01e25ccade87dcf984402412a30e59da488b27e5..7864c3cb7237b956987d3e9f4093a31d2a8daf26 100644
--- a/libslirp.spec
+++ b/libslirp.spec
@@ -1,5 +1,5 @@
 Name:           libslirp
-Version:        4.4.0
+Version:        4.6.1
 Release:        1
 Summary:        A general purpose TCP-IP emulator
 
@@ -46,5 +46,8 @@ developing applications that use libslirp.
 %{_libdir}/pkgconfig/slirp.pc
 
 %changelog
+* Tue Jun 07 2022 duyiwei <duyiwei@kylinos.cn> - 4.6.1-1
+- upgrade to 4.6.1 and fix CVE-2021-3952/3953/3954
+
 * Wed Jan 26 2022 fushanqing <fushanqing@kylinos.cn> - 4.4.0-1
-- Initial package
\ No newline at end of file
+- Initial package