diff --git a/varnish.spec b/varnish.spec
index b1401123b5d0bc6fa3201dce2b46f3f1d5af9794..61dc848592f9674659547b624e2aea2c61e89a6a 100644
--- a/varnish.spec
+++ b/varnish.spec
@@ -1,7 +1,7 @@
 Name:             varnish
 Summary:          A web application accelerator
 Version:          6.0.0
-Release:          6
+Release:          7
 License:          BSD
 URL:              https://www.varnish-cache.org/
 Source0:          http://varnish-cache.org/_downloads/varnish-%{version}.tgz
@@ -10,6 +10,13 @@ Source0:          http://varnish-cache.org/_downloads/varnish-%{version}.tgz
 Source1:          https://github.com/varnishcache/pkg-varnish-cache/archive/0ad2f22629c4a368959c423a19e352c9c6c79682/pkg-varnish-cache-0ad2f22.tar.gz
 
 Patch0001:        varnish-5.1.1.fix_ld_library_path_in_doc_build.patch
+Patch0002:        CVE-2019-15892-1.patch
+Patch0003:        CVE-2019-15892-2.patch
+Patch0004:        CVE-2019-15892-3.patch
+Patch0006:        CVE-2019-15892-4.patch
+Patch0007:        CVE-2019-15892-5.patch
+Patch0008:        CVE-2019-15892-6.patch
+Patch0009:        CVE-2019-15892-7.patch
 
 BuildRequires:    python3-sphinx python3-docutils pkgconfig make graphviz nghttp2 systemd-units
 BuildRequires:    ncurses-devel pcre-devel libedit-devel
@@ -158,6 +165,12 @@ test -f /etc/varnish/secret || (uuidgen > /etc/varnish/secret && chmod 0600 /etc
 %{_mandir}/man7/*.7*
 
 %changelog
+* Tue Jan 19 2021 wangyue <wangyue92@huawei.com> - 6.0.0-7
+- Fix CVE-2019-15892 and changelog
+
+* Tue Jan 19 2021 wangyue <wangyue92@huawei.com> - 6.0.0-6
+- Fix CVE-2019-15892
+
 * Mon Nov 9 2020 baizhonggui <baizhonggui@huawei.com> - 6.0.0-5
 - Add install requires help package into main package