diff --git a/sssd.spec b/sssd.spec
index f48c304b1e8e88aaa95b8c15becbe1cc27fe4cf5..a7aac3197d48e4ed390c9be879545775050fb2dc 100644
--- a/sssd.spec
+++ b/sssd.spec
@@ -8,13 +8,17 @@
 
 Name: sssd
 Version: 2.9.5
-Release: 3
+Release: 4
 Summary: System Security Services Daemon
 License: GPL-3.0-or-later
 URL: https://github.com/SSSD/sssd/
 Source0: https://github.com/SSSD/sssd/releases/download/%{version}/sssd-%{version}.tar.gz
 
 Patch0001: backport-Make-sure-invalid-krb5-context-is-not-used.patch
+Patch0002: backport-fix-Missing-dns_update_per_family-option.patch
+Patch0003: backport-honor-ad_use_ldaps-setting-with-ad_machine_pw_renewal.patch
+Patch0004: backport-mistype-fix.patch
+
 
 Requires: sssd-ad = %{version}-%{release}
 Requires: sssd-common = %{version}-%{release}
@@ -914,6 +918,9 @@ fi
 %systemd_postun_with_restart sssd.service
 
 %changelog
+* Fri Dec 06 2024 shenzhongwei <shenzhongwei@kylinos.cn> - 2.9.5-4
+- add missing patches
+
 * Mon Dec  02 2024 Majianhan <majianhan@kylinos.cn> - 2.9.5-3
 - backport upstream patches