diff --git a/squid.spec b/squid.spec
index bc11b3b31f8dedb49b70229eded6349836e6937e..b6944b7a42117e6affa7588f3728ca3186e70381 100644
--- a/squid.spec
+++ b/squid.spec
@@ -2,7 +2,7 @@
 
 Name:     squid
 Version:  6.6
-Release:  3
+Release:  4
 Summary:  The Squid proxy caching server
 Epoch:    7
 License:  GPLv2+ and (LGPLv2+ and MIT and BSD and Public Domain)
@@ -66,7 +66,7 @@ autoreconf -fi
    --enable-linux-netfilter --enable-removal-policies="heap,lru" \
    --enable-snmp --enable-ssl --enable-ssl-crtd \
    --enable-storeio="aufs,diskd,ufs,rock" --enable-diskio --enable-wccpv2 \
-   --enable-esi --enable-ecap --with-aio --with-default-user="squid" \
+   --disable-esi --enable-ecap --with-aio --with-default-user="squid" \
    --with-dl --with-openssl --with-pthreads --disable-arch-native \
    --disable-security-cert-validators \
    --with-tdb --disable-strict-error-checking \
@@ -246,6 +246,12 @@ fi
     chgrp squid /var/cache/samba/winbindd_privileged >/dev/null 2>&1 || :
 
 %changelog
+* Tue Oct 29 2024 xinghe <xinghe2@h-partners.com> - 7:6.6-4
+- Type:cves
+- ID:CVE-2024-45802
+- SUG:NA
+- DESC:fix CVE-2024-45802
+
 * Wed Jun 26 2024 yinyongkang <yinyongkang@kylinos.cn> - 7:6.6-3
 - Type:cves
 - ID:CVE-2024-37894