diff --git a/release-3.9.1.tar.gz b/release-3.9.1.tar.gz
deleted file mode 100644
index 6d932ce..0000000
Binary files a/release-3.9.1.tar.gz and /dev/null differ
diff --git a/xmvn-reactor b/xmvn-reactor
index aea30db..cbd373b 100644
--- a/xmvn-reactor
+++ b/xmvn-reactor
@@ -4,8 +4,8 @@
     <artifact>
       <groupId>org.apache.zookeeper</groupId>
       <artifactId>zookeeper</artifactId>
-      <version>3.9.1</version>
-      <path>absolute-prefix/zookeeper-server/target/zookeeper-3.9.1.jar</path>
+      <version>3.9.3</version>
+      <path>absolute-prefix/zookeeper-server/target/zookeeper-3.9.3.jar</path>
       <properties>
         <type>jar</type>
         <requiresJava>1.6</requiresJava>
@@ -15,7 +15,7 @@
       <groupId>org.apache.zookeeper</groupId>
       <artifactId>zookeeper</artifactId>
       <extension>pom</extension>
-      <version>3.9.1</version>
+      <version>3.9.3</version>
       <path>absolute-prefix/zookeeper-server/pom.xml</path>
       <properties>
         <type>jar</type>
@@ -26,8 +26,8 @@
     <artifact>
       <groupId>org.apache.zookeeper</groupId>
       <artifactId>zookeeper-jute</artifactId>
-      <version>3.9.1</version>
-      <path>absolute-prefix/zookeeper-jute/target/zookeeper-jute-3.9.1.jar</path>
+      <version>3.9.3</version>
+      <path>absolute-prefix/zookeeper-jute/target/zookeeper-jute-3.9.3.jar</path>
       <properties>
         <type>jar</type>
         <requiresJava>1.6</requiresJava>
@@ -37,7 +37,7 @@
       <groupId>org.apache.zookeeper</groupId>
       <artifactId>zookeeper-jute</artifactId>
       <extension>pom</extension>
-      <version>3.9.1</version>
+      <version>3.9.3</version>
       <path>absolute-prefix/zookeeper-jute/pom.xml</path>
       <properties>
         <type>jar</type>
@@ -48,8 +48,8 @@
     <artifact>
       <groupId>org.apache.zookeeper</groupId>
       <artifactId>zookeeper-prometheus-metrics</artifactId>
-      <version>3.9.1</version>
-      <path>absolute-prefix/zookeeper-metrics-providers/zookeeper-prometheus-metrics/target/zookeeper-prometheus-metrics-3.9.1.jar</path>
+      <version>3.9.3</version>
+      <path>absolute-prefix/zookeeper-metrics-providers/zookeeper-prometheus-metrics/target/zookeeper-prometheus-metrics-3.9.3.jar</path>
       <properties>
         <type>jar</type> 
         <requiresJava>1.6</requiresJava>
@@ -59,7 +59,7 @@
       <groupId>org.apache.zookeeper</groupId>
       <artifactId>zookeeper-prometheus-metrics</artifactId>
       <extension>pom</extension>
-      <version>3.9.1</version>
+      <version>3.9.3</version>
       <path>absolute-prefix/zookeeper-metrics-providers/zookeeper-prometheus-metrics/pom.xml</path> 
       <properties> 
         <type>jar</type>
diff --git a/zookeeper-release-3.9.3.tar.gz b/zookeeper-release-3.9.3.tar.gz
new file mode 100644
index 0000000..3010bd4
Binary files /dev/null and b/zookeeper-release-3.9.3.tar.gz differ
diff --git a/zookeeper.spec b/zookeeper.spec
index 412fc84..1ebc0e0 100644
--- a/zookeeper.spec
+++ b/zookeeper.spec
@@ -1,5 +1,5 @@
-%define rel_ver 3.9.1
-%define pkg_ver 2
+%define rel_ver 3.9.3
+%define pkg_ver 1
 %define _prefix /opt/zookeeper
 %global debug_package %{nil}
 
@@ -10,7 +10,7 @@ Release: %{pkg_ver}
 License: Apache-2.0 and OpenSSL and SSLeay and MIT and BSD
 Group: Applications/Databases
 URL: https://www.apache.org/dist/zookeeper/
-Source0: https://github.com/apache/zookeeper/archive/refs/tags/release-%{rel_ver}.tar.gz
+Source0: https://github.com/apache/zookeeper/archive/refs/tags/%{name}-release-%{rel_ver}.tar.gz
 Source1: zoo.cfg
 Source2: zookeeper.service
 Source3: zookeeper.sysconfig
@@ -82,6 +82,9 @@ exit 0
 %systemd_postun_with_restart zookeeper.service
 
 %changelog
+* Mon Nov 18 2024 dongjiao <dongjiao@kylinos.cn> - 3.9.3-1
+- update version 3.9.3 to fix CVE-2024-23944 CVE-2024-51504
+ 
 * Fri May 10 2024 Ge Wang <wang__ge@126.com> - 3.9.1-2
 - correct package groupId