diff --git a/openssl.spec b/openssl.spec
index 2351fc94401dd87b497362e1faf88c74a2c9e488..cb9f026249eafe9242e9e6b4efe6fb7dcccd9452 100644
--- a/openssl.spec
+++ b/openssl.spec
@@ -1,4 +1,4 @@
-%define anolis_release 4
+%define anolis_release 5
 %global soversion 3
 
 %define srpmhash() %{lua:
@@ -42,7 +42,6 @@ Patch: 0005-Disable-signature-verification-with-bad-digests-R.patch
 Patch: 0006-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
 Patch: 0007-Add-FIPS_mode-compatibility-macro.patch
 Patch: 0008-Add-Kernel-FIPS-mode-flag-support-FIXSTYLE.patch
-Patch: 0009-Drop-weak-curve-definitions-RENAMED-SQUASHED.patch
 Patch: 0010-Disable-explicit-ec-curves.patch
 Patch: 0011-skipped-tests-EC-curves.patch
 Patch: 0012-skip-quic-pairwise.patch
@@ -182,7 +181,7 @@ export HASHBANGPERL=/usr/bin/perl
         --system-ciphers-file=%{_sysconfdir}/crypto-policies/back-ends/openssl.config \
         zlib enable-camellia enable-seed enable-rfc3779 enable-sctp \
         enable-cms enable-md2 enable-rc5 enable-ktls enable-fips\
-        no-mdc2 no-ec2m no-sm2 no-sm4 no-atexit enable-buildtest-c++\
+        no-mdc2 no-ec2m enable-sm2 enable-sm4 no-atexit enable-buildtest-c++\
         shared  ${sslarch} $RPM_OPT_FLAGS '-DDEVRANDOM="\"/dev/urandom\"" -DREDHAT_FIPS_VERSION="\"%{fips}\""'\
 	-Wl,--allow-multiple-definition
 
@@ -296,6 +295,9 @@ rm -f $RPM_BUILD_ROOT%{_sysconfdir}/pki/tls/{openssl.cnf.dist,ct_log_list.cnf.di
 %doc NEWS.md README.md
 
 %changelog
+* Wed Dec 10 2025 Weisson <Weisson@linux.alibabab.com> 1:3.5.4-5
+- enable sm2/sm4.
+
 * Mon Dec 08 2025 xxcui <xxcui@linux.alibabab.com> 1:3.5.4-4
 - Add patch to support sm3 optimized with rvv cve.
 - Add patch to support sha512 optimized wth rvv cve.