diff --git a/thrift.spec b/thrift.spec
index a6c8b625b274922dec44224d742c0ceed0a96a3f..5bb12b536057a6eb6bf1a8d213dc1935e2e91f74 100644
--- a/thrift.spec
+++ b/thrift.spec
@@ -38,7 +38,7 @@
 %global lua_configure --without-lua
 Name:                thrift
 Version:             0.14.0
-Release:             3
+Release:             4
 Summary:             Software framework for cross-language services development
 License:             ASL 2.0 and BSD and zlib
 URL:                 https://thrift.apache.org/
@@ -299,6 +299,9 @@ cp libthrift_dir/pom.xml %{buildroot}%{_datadir}/maven-poms/libthrift/libthrift.
 %endif
 
 %changelog
+* Sat Dec 25 2021 yaoxin <yaoxin30@huawei.com> - 0.14.0-4
+- This package depends on log4j.After the log4j vulnerability CVE-2021-45105 is fixed,the version needs to be rebuild.
+
 * Wed Dec 8 2021 baizhonggui <baizhonggui@huawei.com> - 0.14.0-3
 - fix java compile fail