diff --git a/libreswan-4.12.tar.gz b/libreswan-4.14.tar.gz
similarity index 34%
rename from libreswan-4.12.tar.gz
rename to libreswan-4.14.tar.gz
index 6f707b902a2843c4525a9295da9729fbae0d3705..5efa7bad353521b692c42f18175207010a71d7cc 100644
Binary files a/libreswan-4.12.tar.gz and b/libreswan-4.14.tar.gz differ
diff --git a/libreswan.spec b/libreswan.spec
index 0a1866c994a1f6b33f3c286af03b7e697bb9f0d3..0de489958d8a814a564f06102ddaa69d4e957ad6 100644
--- a/libreswan.spec
+++ b/libreswan.spec
@@ -1,4 +1,4 @@
-%global nss_version 3.44.0-8
+%global nss_version 3.52
 %global unbound_version 1.6.6
 %global libreswan_config \\\
     SHELL_BINARY=/usr/bin/sh \\\
@@ -25,7 +25,7 @@
 
 Name: libreswan
 Summary: IKE implementation for IPsec with IKEv1 and IKEv2 support
-Version: 4.12
+Version: 4.14
 Release: 1
 License: GPLv2
 Url: https://libreswan.org/
@@ -191,6 +191,9 @@ certutil -N -d sql:$tmpdir --empty-password
 %attr(0644,root,root) %doc %{_mandir}/*/*
 
 %changelog
+* Tue Mar 12 2024 yaoxin <yao_xin001@hoperun.com> - 4.14-1
+- Upgrade to 4.14 for fix CVE-2024-2357
+
 * Sat Aug 12 2023 Funda Wang <fundawang@yeah.net> - 4.12-1
 - Update to 4.12 for CVE-2023-38710, CVE-2023-38711 and CVE-2023-38712