diff --git a/0000-openvswitch-add-stack-protector-strong.patch b/0000-openvswitch-add-stack-protector-strong.patch
new file mode 100644
index 0000000000000000000000000000000000000000..36dbe8c96245b7cbd1e7bdff67320f6101e60459
--- /dev/null
+++ b/0000-openvswitch-add-stack-protector-strong.patch
@@ -0,0 +1,13 @@
+diff --git a/Makefile.am b/Makefile.am
+index ff1f94b..cca6cf0 100644
+--- a/Makefile.am
++++ b/Makefile.am
+@@ -30,7 +30,7 @@ AM_CPPFLAGS += -I $(top_builddir)/lib
+ 
+ AM_CPPFLAGS += $(SSL_INCLUDES)
+ 
+-AM_CFLAGS = -Wstrict-prototypes
++AM_CFLAGS = -Wstrict-prototypes -fstack-protector-strong
+ AM_CFLAGS += $(WARNING_FLAGS)
+ AM_CFLAGS += $(OVS_CFLAGS)
+ 
diff --git a/openvswitch.spec b/openvswitch.spec
index 1bb38c66e9137d865d5c6f616e8cb02af60a4003..9d1e18520a87dbe926244cf62d4d41bca665f9a0 100644
--- a/openvswitch.spec
+++ b/openvswitch.spec
@@ -3,9 +3,10 @@ Summary:        Production Quality, Multilayer Open Virtual Switch
 URL:            http://www.openvswitch.org/
 Version:        2.12.0
 License:        ASL 2.0
-Release:        4
+Release:        5
 Source:         https://www.openvswitch.org/releases/openvswitch-%{version}.tar.gz
 Buildroot:      /tmp/openvswitch-rpm
+Patch0000:      0000-openvswitch-add-stack-protector-strong.patch
 Requires:       logrotate hostname python >= 2.7 python2-six selinux-policy-targeted
 BuildRequires:  python2-six, openssl-devel checkpolicy selinux-policy-devel autoconf automake libtool python-sphinx unbound-devel
 Provides:       openvswitch-selinux-policy = %{version}-%{release}
@@ -200,6 +201,9 @@ exit 0
 %doc README.rst NEWS rhel/README.RHEL.rst
 
 %changelog
+* Wed Mar 18 2020 zhangtao <zhangtao221@huawei.com> - 2.12.0-5
+- add stack protector
+
 * Tue Mar 17 2020 gulining <gulining1@huawei.com> - 2.12.0-4
 - remove extra spaces to resolve compile error