diff --git a/HikariCP.spec b/HikariCP.spec
index ed4a2e5..ec5481b 100644
--- a/HikariCP.spec
+++ b/HikariCP.spec
@@ -1,6 +1,6 @@
 Name:          HikariCP
 Version:       2.4.3
-Release:       4
+Release:       5
 Summary:       JDBC Connection Pool
 License:       ASL 2.0
 URL:           https://github.com/brettwooldridge/HikariCP
@@ -62,6 +62,9 @@ find src/test/java/com/zaxxer/hikari/osgi  -print -delete
 %files help -f .mfiles-javadoc
 
 %changelog
+* Thu Dec 16 2021 yaoxin <yaoxin30@huawei.com> 2.4.3-5
+- This package depends on log4j. After the log4j vulnerability CVE-2021-44228 is fixed, the version needs to be rebuild.
+
 * Tue Oct 27 2020 huanghaitao <huanghaitao8@huawei.com> - 2.4.3-4
 - Remove simple-jndi dep