diff --git a/ongres-scram.spec b/ongres-scram.spec
index f1e8a3d8cc96e427c8c07f5f0a9b73315c6886eb..fdada8bc5cb7f8997888330bf66edd6ae2339513 100644
--- a/ongres-scram.spec
+++ b/ongres-scram.spec
@@ -1,11 +1,11 @@
 Name:		ongres-scram
-Version:	1.0.0.beta.2
-Release:	8
+Version:	2.1
+Release:	1
 Summary:	Java Implementation for SCRAM(Salted Challenge Response Authentication Mechanism)
 License:	BSD
 URL:		https://github.com/ongres/scram
-Source0:	https://github.com/ongres/scram/archive/1.0.0-beta.2/scram-1.0.0-beta.2.tar.gz
-BuildRequires:	maven-local
+Source0:	https://github.com/ongres/scram/archive/2.1/scram-2.1.tar.gz
+BuildRequires:	maven-local ongres-stringprep
 BuildArch:	noarch
 
 %description
@@ -35,13 +35,16 @@ Summary:	Parent POM of ongres-scram
 This package contains the ongres-scram parent POM.
 
 %prep
-%autosetup -p1 -n "scram-1.0.0-beta.2"
+%autosetup -p1 -n "scram-2.1"
 find \( -name '*.jar' -o -name '*.class' \) -delete
 %pom_remove_plugin :nexus-staging-maven-plugin
 %pom_remove_plugin :maven-source-plugin
 %pom_remove_plugin :maven-dependency-plugin client
 %pom_remove_plugin -r :maven-javadoc-plugin
 
+%pom_remove_dep com.google.code.findbugs:annotations
+sed -i 's/.*SuppressFBWarnings.*//' common/src/main/java/com/ongres/scram/common/message/ServerFinalMessage.java
+
 %build
 %mvn_build -s
 
@@ -59,6 +62,10 @@ sed -i 's/[0-9a-f]\{8\}-[0-9a-f]\{4\}-[0-9a-f]\{4\}-[0-9a-f]\{4\}-[0-9a-f]\{12\}
 %files parent -f .mfiles-parent
 
 %changelog
+* Thu Feb 17 houyingchao <houyingchao@huawei.com> - 2.1-1
+- Upgrade to 2.1 version
+- Fix CVE-2022-21724
+
 * Mon Nov 23 Senlin <xiasenlin1@huawei.com> - 1.0.0.beta.2-8
 - modify the '~' in version
 
diff --git a/scram-1.0.0-beta.2.tar.gz b/scram-1.0.0-beta.2.tar.gz
deleted file mode 100644
index 6530c319d466dcdeac3e3b172f75dcafecb1ac09..0000000000000000000000000000000000000000
Binary files a/scram-1.0.0-beta.2.tar.gz and /dev/null differ
diff --git a/scram-2.1.tar.gz b/scram-2.1.tar.gz
new file mode 100644
index 0000000000000000000000000000000000000000..653812a7e5e6934adba0b6eed58b0ec45a5d5d39
Binary files /dev/null and b/scram-2.1.tar.gz differ