diff --git a/libreswan-4.12.tar.gz b/libreswan-4.12.tar.gz
deleted file mode 100644
index 6f707b9..0000000
Binary files a/libreswan-4.12.tar.gz and /dev/null differ
diff --git a/libreswan-4.14.tar.gz b/libreswan-4.14.tar.gz
new file mode 100644
index 0000000..5efa7ba
Binary files /dev/null and b/libreswan-4.14.tar.gz differ
diff --git a/libreswan.spec b/libreswan.spec
index 0a1866c..0de4899 100644
--- a/libreswan.spec
+++ b/libreswan.spec
@@ -1,4 +1,4 @@
-%global nss_version 3.44.0-8
+%global nss_version 3.52
 %global unbound_version 1.6.6
 %global libreswan_config \\\
     SHELL_BINARY=/usr/bin/sh \\\
@@ -25,7 +25,7 @@
 
 Name: libreswan
 Summary: IKE implementation for IPsec with IKEv1 and IKEv2 support
-Version: 4.12
+Version: 4.14
 Release: 1
 License: GPLv2
 Url: https://libreswan.org/
@@ -191,6 +191,9 @@ certutil -N -d sql:$tmpdir --empty-password
 %attr(0644,root,root) %doc %{_mandir}/*/*
 
 %changelog
+* Tue Mar 12 2024 yaoxin <yao_xin001@hoperun.com> - 4.14-1
+- Upgrade to 4.14 for fix CVE-2024-2357
+
 * Sat Aug 12 2023 Funda Wang <fundawang@yeah.net> - 4.12-1
 - Update to 4.12 for CVE-2023-38710, CVE-2023-38711 and CVE-2023-38712