diff --git a/xmvn-reactor b/xmvn-reactor
index aea30db77e59fc1fcc86c9e92b2bb1dc92da1f04..cbd373be53780eb79c58d196108743ac73fd7a1e 100644
--- a/xmvn-reactor
+++ b/xmvn-reactor
@@ -4,8 +4,8 @@
     <artifact>
       <groupId>org.apache.zookeeper</groupId>
       <artifactId>zookeeper</artifactId>
-      <version>3.9.1</version>
-      <path>absolute-prefix/zookeeper-server/target/zookeeper-3.9.1.jar</path>
+      <version>3.9.3</version>
+      <path>absolute-prefix/zookeeper-server/target/zookeeper-3.9.3.jar</path>
       <properties>
         <type>jar</type>
         <requiresJava>1.6</requiresJava>
@@ -15,7 +15,7 @@
       <groupId>org.apache.zookeeper</groupId>
       <artifactId>zookeeper</artifactId>
       <extension>pom</extension>
-      <version>3.9.1</version>
+      <version>3.9.3</version>
       <path>absolute-prefix/zookeeper-server/pom.xml</path>
       <properties>
         <type>jar</type>
@@ -26,8 +26,8 @@
     <artifact>
       <groupId>org.apache.zookeeper</groupId>
       <artifactId>zookeeper-jute</artifactId>
-      <version>3.9.1</version>
-      <path>absolute-prefix/zookeeper-jute/target/zookeeper-jute-3.9.1.jar</path>
+      <version>3.9.3</version>
+      <path>absolute-prefix/zookeeper-jute/target/zookeeper-jute-3.9.3.jar</path>
       <properties>
         <type>jar</type>
         <requiresJava>1.6</requiresJava>
@@ -37,7 +37,7 @@
       <groupId>org.apache.zookeeper</groupId>
       <artifactId>zookeeper-jute</artifactId>
       <extension>pom</extension>
-      <version>3.9.1</version>
+      <version>3.9.3</version>
       <path>absolute-prefix/zookeeper-jute/pom.xml</path>
       <properties>
         <type>jar</type>
@@ -48,8 +48,8 @@
     <artifact>
       <groupId>org.apache.zookeeper</groupId>
       <artifactId>zookeeper-prometheus-metrics</artifactId>
-      <version>3.9.1</version>
-      <path>absolute-prefix/zookeeper-metrics-providers/zookeeper-prometheus-metrics/target/zookeeper-prometheus-metrics-3.9.1.jar</path>
+      <version>3.9.3</version>
+      <path>absolute-prefix/zookeeper-metrics-providers/zookeeper-prometheus-metrics/target/zookeeper-prometheus-metrics-3.9.3.jar</path>
       <properties>
         <type>jar</type> 
         <requiresJava>1.6</requiresJava>
@@ -59,7 +59,7 @@
       <groupId>org.apache.zookeeper</groupId>
       <artifactId>zookeeper-prometheus-metrics</artifactId>
       <extension>pom</extension>
-      <version>3.9.1</version>
+      <version>3.9.3</version>
       <path>absolute-prefix/zookeeper-metrics-providers/zookeeper-prometheus-metrics/pom.xml</path> 
       <properties> 
         <type>jar</type>
diff --git a/release-3.9.1.tar.gz b/zookeeper-release-3.9.3.tar.gz
similarity index 38%
rename from release-3.9.1.tar.gz
rename to zookeeper-release-3.9.3.tar.gz
index 6d932ced8b3cf30221e2f2f97dee832222e5571a..3010bd47610c0398a3e36e2899afbf07af03960b 100644
Binary files a/release-3.9.1.tar.gz and b/zookeeper-release-3.9.3.tar.gz differ
diff --git a/zookeeper.spec b/zookeeper.spec
index 412fc84889c565344ec58ae8a29357f1923acb61..1ebc0e0b008b4ced958793f36c319253f6f575ca 100644
--- a/zookeeper.spec
+++ b/zookeeper.spec
@@ -1,5 +1,5 @@
-%define rel_ver 3.9.1
-%define pkg_ver 2
+%define rel_ver 3.9.3
+%define pkg_ver 1
 %define _prefix /opt/zookeeper
 %global debug_package %{nil}
 
@@ -10,7 +10,7 @@ Release: %{pkg_ver}
 License: Apache-2.0 and OpenSSL and SSLeay and MIT and BSD
 Group: Applications/Databases
 URL: https://www.apache.org/dist/zookeeper/
-Source0: https://github.com/apache/zookeeper/archive/refs/tags/release-%{rel_ver}.tar.gz
+Source0: https://github.com/apache/zookeeper/archive/refs/tags/%{name}-release-%{rel_ver}.tar.gz
 Source1: zoo.cfg
 Source2: zookeeper.service
 Source3: zookeeper.sysconfig
@@ -82,6 +82,9 @@ exit 0
 %systemd_postun_with_restart zookeeper.service
 
 %changelog
+* Mon Nov 18 2024 dongjiao <dongjiao@kylinos.cn> - 3.9.3-1
+- update version 3.9.3 to fix CVE-2024-23944 CVE-2024-51504
+ 
 * Fri May 10 2024 Ge Wang <wang__ge@126.com> - 3.9.1-2
 - correct package groupId