diff --git a/zziplib.spec b/zziplib.spec
index 8c6743e4faa0fb74da71f2e0b1e0a348695f6849..22ddea4ea2efc45a233b23ed57a63d37bc5335fe 100644
--- a/zziplib.spec
+++ b/zziplib.spec
@@ -4,7 +4,7 @@ sed -i 's|^runpath_var=LD_RUN_PATH|runpath_var=DIE_RPATH_DIE|g' libtool
 
 Name:            zziplib
 Version:         0.13.71
-Release:         5
+Release:         6
 Summary:         Lightweight library for zip compression
 License:         LGPLv2+ or MPLv1.1
 URL:             http://zziplib.sourceforge.net
@@ -61,6 +61,7 @@ sed -i -e 's:docs ::g' Makefile.am
 %patch6005 -p1
 %patch6006 -p1
 %patch6007 -p1
+%patch6008 -p1
 
 %build
 %configure --disable-static --enable-sdl --enable-frame-pointer --enable-builddir=_builddir
@@ -94,6 +95,9 @@ find %{buildroot} -type f -name "*.la" -delete -print
 %{_mandir}/man3/*
 
 %changelog
+* Sat Dec 23 2023 liningjie <liningjie@xfusion.com> - 0.13.71-6
+- apply backport-CVE-2020-18770.patch
+
 * Thu Sep 28 2023 licihua <licihua@huawei.com> - 0.13.71-5
 - fix CVE-2020-18770