diff --git a/tcpdump.spec b/tcpdump.spec
index 3f0cd46e78a59f3e51f303f8df8495fb57ba5b60..4010c036253c5d3bd75a73b29bb94585a75ac2db 100644
--- a/tcpdump.spec
+++ b/tcpdump.spec
@@ -1,7 +1,7 @@
 Name:           tcpdump
 Epoch:          14
 Version:        4.9.3
-Release:        4 
+Release:        5 
 Summary:        A network traffic monitoring tool
 License:        BSD with advertising
 URL:            http://www.tcpdump.org
@@ -19,6 +19,7 @@ Patch0007:      0007-Introduce-nn-option.patch
 Patch0009:      0009-Change-n-flag-to-nn-in-TESTonce.patch
 Patch0011:      0011-Evp-cipher-buffers.patch
 Patch0012:      0012-Add-printing-support-for-vsockmon-devices.patch
+Patch0013:      CVE-2020-8037.patch
 
 Requires(pre):  shadow-utils
 BuildRequires:  automake openssl-devel libpcap-devel git-core gcc
@@ -95,6 +96,12 @@ exit 0
 - SUG:NA
 - DESC:fix CVE-2020-8037
 
+* Mon Dec 21 2020 wangxp006 <wangxp006@163.com> - 4.9.3-4
+- Type:CVE
+- ID:CVE-2020-8037
+- SUG:NA
+- DESC:fix CVE-2020-8037
+
 * Tue Dec 31 2019 openEuler Buildteam <buildteam@openeuler.org> - 4.9.3-3
 - Type:bugfix
 - ID:NA