diff --git a/thrift.spec b/thrift.spec
index c3e2347a61ce7fffa8af3326f74fec5b9de20e31..cf4b0bcd0850b8964dea6f9872971836481bcbc2 100644
--- a/thrift.spec
+++ b/thrift.spec
@@ -38,7 +38,7 @@
 %global lua_configure --without-lua
 Name:                thrift
 Version:             0.14.0
-Release:             4
+Release:             5
 Summary:             Software framework for cross-language services development
 License:             ASL 2.0 and BSD and zlib and MIT
 URL:                 https://thrift.apache.org/
@@ -299,6 +299,9 @@ cp libthrift_dir/pom.xml %{buildroot}%{_datadir}/maven-poms/libthrift/libthrift.
 %endif
 
 %changelog
+* Fri Dec 24 2021 yaoxin <yaoxin30@huawei.com> - 0.14.0-5
+- This package depends on log4j.After the log4j vulnerability CVE-2021-45105 is fixed,the version needs to be rebuild.
+
 * Fri Dec 17 2021 caodongxia <caodongxia@huawei.com> - 0.14.0-4
 - fix java compile fail