diff --git a/fetchmail-6.4.20.tar.xz b/fetchmail-6.4.20.tar.xz
deleted file mode 100644
index d292d369072bec23a02890e1c0b950b3a5933ac6..0000000000000000000000000000000000000000
Binary files a/fetchmail-6.4.20.tar.xz and /dev/null differ
diff --git a/fetchmail-6.4.20.tar.xz.asc b/fetchmail-6.4.20.tar.xz.asc
deleted file mode 100644
index e3a54ac15440e555d80e7807dd4c486b865aae26..0000000000000000000000000000000000000000
--- a/fetchmail-6.4.20.tar.xz.asc
+++ /dev/null
@@ -1,16 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iQIzBAABCgAdFiEE3EplW9mTzUhx+oIQ5BKxVu/zhVoFAmEBhtMACgkQ5BKxVu/z
-hVoVQBAAlSjS4HaUnnHFiNNtCP0QITl/7+a1tCS3E8HdAOyn+kU2idHJnFmQ/2jL
-Z2qkpXaKa8kvJHr/I603xJFxf9IMpLu2qD0IjMFOgzTjGWc7b/Vk1n1n88Oeo34V
-sGfMqxnqzeqW8ejdptbHFq4oJcfV1rZhT6w2mXwNJiH0e8w6EX4xqR/xU1Jyqvxo
-dmJpKt1uPGvkenSZvetyO4flwQKCwFGS6mx6taPpbHC4LsfugE+AP1AKPnEFg+Ai
-p1+5ieSkuSxIJc09EYw5ahfch2txV6cxX1qKkaWrmYkjfzKl2XyUOoUT+KjZBihR
-CwA5W4ybNxbIOOo9r1+UB8kQslhjDbpJuCnNEt3HpOzcGCHtEHbYqJhyvUq/DO19
-fYKSmg2DcC709oM3drQOXBk2NV5YJ6QWoBvEp3f169ZvsO+clwkPumUXADUdM8EK
-vwzwdn+a0LyoET+xmB5CSfxHwr8sizO2sihm6nZBR+hGQgoTkyRg7OckxAQu9Q/9
-dZ2S1srB2cWurrl/BIJYFTIWXV8Y66HI5USv1y5fAUFR4uFJVh/oQuhp3Jnykf9m
-Fgsb37MHK2EycwmYmIXMRyGpJ7w2EjBdoePYwi/YFJzHVuSSzC3k3Iz738xDgxA6
-ikE11M+GN+qXzyCfMQfE4l6MMvBZoB41mPm01j28nWMSZ7a9Glg=
-=brTa
------END PGP SIGNATURE-----
diff --git a/fetchmail-6.4.22.tar.xz b/fetchmail-6.4.22.tar.xz
new file mode 100644
index 0000000000000000000000000000000000000000..34e8e962b07c55289bd9e15bdc39d402c4a8e26a
Binary files /dev/null and b/fetchmail-6.4.22.tar.xz differ
diff --git a/fetchmail-6.4.22.tar.xz.asc b/fetchmail-6.4.22.tar.xz.asc
new file mode 100644
index 0000000000000000000000000000000000000000..05cc2ae02f37748817f711961f3f2a5ec8f1671c
--- /dev/null
+++ b/fetchmail-6.4.22.tar.xz.asc
@@ -0,0 +1,16 @@
+-----BEGIN PGP SIGNATURE-----
+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+=Qd4Q
+-----END PGP SIGNATURE-----
diff --git a/fetchmail.spec b/fetchmail.spec
index d44e23ae5f1781a7c26ff110ce30c02eb33b1005..6664f8d473ee2404cfcf9c2be20f9a21e95a479e 100644
--- a/fetchmail.spec
+++ b/fetchmail.spec
@@ -1,11 +1,11 @@
 Summary:             A remote mail retrieval and forwarding utility
 Name:                fetchmail
-Version:             6.4.20
+Version:             6.4.22
 Release:             1
 URL:                 http://www.fetchmail.info/
 License:             GPL+ and Public Domain
-Source0:             http://downloads.sourceforge.net/%{name}/%{name}-%{version}.tar.xz
-Source1:             http://downloads.sourceforge.net/%{name}/%{name}-%{version}.tar.xz.asc
+Source0:             https://sourceforge.net/projects/%{name}/files/branch_6.4/%{name}-%{version}.tar.xz
+Source1:             https://sourceforge.net/projects/%{name}/files/branch_6.4/%{name}-%{version}.tar.xz.asc
 Source2:             fetchmail.service
 Source3:             fetchmailrc.example
 BuildRequires:       gcc gettext-devel krb5-devel openssl-devel systemd python3-devel
@@ -49,6 +49,9 @@ rm -f $RPM_BUILD_ROOT%{python3_sitelib}/__pycache__/fetchmailconf*
 %config(noreplace) %attr(0600, mail, mail) %{_sysconfdir}/fetchmailrc.example
 
 %changelog
+* Tue Sep 14 2021 yaoxin <yaoxin30@huawei.com> - 6.4.22-1
+- Update to 6.4.22 for fix CVE-2021-39272
+
 * Tue Aug 10 2021 houyingchao <houyingchao@huawei.com> - 6.4.21-1
 - Update from 6.4.1 to 6.4.20