diff --git a/hadoop-3.3.3-src.tar.gz b/hadoop-3.3.4-src.tar.gz
similarity index 76%
rename from hadoop-3.3.3-src.tar.gz
rename to hadoop-3.3.4-src.tar.gz
index fe1a6bf..d3f7af1 100644
Binary files a/hadoop-3.3.3-src.tar.gz and b/hadoop-3.3.4-src.tar.gz differ
diff --git a/hadoop.spec b/hadoop.spec
index 84aef22..5037567 100644
--- a/hadoop.spec
+++ b/hadoop.spec
@@ -10,7 +10,7 @@
 %global __provides_exclude_from ^%{_libdir}/%{name}/.*$
 %define _binaries_in_noarch_packages_terminate_build 0
 Name:   hadoop
-Version: 3.3.3
+Version: 3.3.4
 Release: 1
 Summary: A software platform for processing vast amounts of data
 # The BSD license file is missing
@@ -39,7 +39,7 @@ BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root
 BuildRequires: java-1.8.0-openjdk-devel maven hostname maven-local tomcat cmake snappy openssl-devel 
 BuildRequires: cyrus-sasl-devel chrpath systemd protobuf2-compiler protobuf2-devel protobuf2-java protobuf2
 BuildRequires: leveldbjni leveldb-java hawtjni-runtime gcc-c++
-BuildRequires: npm chrpath 
+BuildRequires: npm chrpath
 Requires: java-1.8.0-openjdk protobuf2-java apache-zookeeper
 
 %description
@@ -308,7 +308,7 @@ npm cache clean -f
 %mvn_file :%{name}-common::tests: %{name}/%{name}-common
 
 %build
-mvn clean -Dsnappy.lib=/usr/lib64 -Dbundle.snappy -Dcontainer-executor.conf.dir=%{_sysconfdir}/%{name} -Pdist,native -DskipTests -DskipIT -Dmaven.javadoc.skip=true package
+mvn clean  -Dsnappy.lib=/usr/lib64 -Dbundle.snappy -Dcontainer-executor.conf.dir=%{_sysconfdir}/%{name} -Pdist,native -DskipTests -DskipIT -Dmaven.javadoc.skip=true package
 
 %install
 # Copy all jar files except those generated by the build
@@ -754,6 +754,7 @@ pushd $basedir/share/%{name}/common
 popd
 pushd $basedir/share/%{name}/common/lib
   link_hadoop_jars %{buildroot}%{_datadir}/%{name}/common/lib
+  \cp -r %{_builddir}/hadoop-%{version}-src/hadoop-dist/target/hadoop-%{version}/share/hadoop/common/lib/*  %{buildroot}%{_datadir}/%{name}/common/lib
 popd
 
 # hdfs jar dependencies
@@ -766,6 +767,7 @@ cp -f hadoop-hdfs-project/%{name}-hdfs-nfs/target/hadoop-hdfs-nfs-%{version}.jar
 cp -f hadoop-hdfs-project/%{name}-hdfs-rbf/target/hadoop-hdfs-rbf-%{version}.jar $hdfsdir/share/%{name}/hdfs
 pushd $hdfsdir/share/%{name}/hdfs
   link_hadoop_jars %{buildroot}%{_datadir}/%{name}/hdfs
+  \cp -r %{_builddir}/hadoop-%{version}-src/hadoop-dist/target/hadoop-%{version}/share/hadoop/hdfs/lib %{buildroot}%{_datadir}/%{name}/hdfs/lib 
 popd
 
 # httpfs
@@ -1126,6 +1128,9 @@ fi
 %config(noreplace) %{_sysconfdir}/%{name}/container-executor.cfg
 
 %changelog
+* Mon Sep 19 2022 xiexing <xiexing4@hisilicon.com> - 3.3.4-1
+- fix CVE-2021-25642 
+
 * Tue Sep 13 2022 xiexing <xiexing4@hisilicon.com> - 3.3.3-1
 - update version to fix CVE-2021-37404 CVE-2022-26612
   CVE-2021-33036 CVE-2022-25168