diff --git a/thrift.spec b/thrift.spec
index 2930794b5134a07c69d2d2853eba85e5d92ac8e3..b2181a442d642e157d94ce8990610b898e9073c8 100644
--- a/thrift.spec
+++ b/thrift.spec
@@ -38,7 +38,7 @@
 %global lua_configure --without-lua
 Name:                thrift
 Version:             0.14.0
-Release:             2
+Release:             3
 Summary:             Software framework for cross-language services development
 License:             ASL 2.0 and BSD and zlib and MIT
 URL:                 https://thrift.apache.org/
@@ -298,6 +298,9 @@ cp libthrift_dir/pom.xml %{buildroot}%{_datadir}/maven-poms/libthrift/libthrift.
 %endif
 
 %changelog
+* Thu Dec 16 2021 wangkai <wangkai385@huawei.com> - 0.14.0-3
+- This package depends on log4j.After the log4j vulnerability CVE-2021-44228 is fixed,the version needs to be rebuild.
+
 * Wed Jul 28 2021 Ge Wang <wangge20@huawei.com> - 0.14.0-2
 - Add libthrift-java subpackage