diff --git a/CVE-2023-46361.patch b/CVE-2023-46361.patch
new file mode 100644
index 0000000000000000000000000000000000000000..8ddfb4d4a840c446126a498c3593562504157f5c
--- /dev/null
+++ b/CVE-2023-46361.patch
@@ -0,0 +1,24 @@
+
+m ee53a7e4bc7819d32e8c0b2057885bcc97586bf3 Mon Sep 17 00:00:00 2001
+From: Sebastian Rasmussen <sebras@gmail.com>
+Date: Sun, 5 Nov 2023 12:21:52 +0100
+Subject: [PATCH] Bug 705041: jbig2dec: Avoid uninitialized allocator in
+ command-line tool.
+
+---
+ jbig2dec.c | 2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+
+diff --git a/jbig2dec.c b/jbig2dec.c
+index 15d204d..1e1dad8 100644
+--- a/jbig2dec.c
++++ b/jbig2dec.c
+@@ -567,7 +567,7 @@ main(int argc, char **argv)
+ {
+     jbig2dec_params_t params;
+     jbig2dec_error_callback_state_t error_callback_state;
+-    jbig2dec_allocator_t allocator_;
++    jbig2dec_allocator_t allocator_ = { 0 };
+     jbig2dec_allocator_t *allocator = &allocator_;
+     Jbig2Ctx *ctx = NULL;
+     FILE *f = NULL, *f_page = NULL;
diff --git a/jbig2dec-0.19.tar.gz b/jbig2dec-0.19.tar.gz
deleted file mode 100644
index a4bc414a4434a8e338f0b891f136ef130b65a902..0000000000000000000000000000000000000000
Binary files a/jbig2dec-0.19.tar.gz and /dev/null differ
diff --git a/jbig2dec-0.20.tar.gz b/jbig2dec-0.20.tar.gz
new file mode 100644
index 0000000000000000000000000000000000000000..43e13101e9108791a5a65bd1cf8f4a1e47d01f77
Binary files /dev/null and b/jbig2dec-0.20.tar.gz differ
diff --git a/jbig2dec.spec b/jbig2dec.spec
index e07ae48de7fe14123fd6ef988eb40f3fe21c5405..c4e2354a47fa99187689ec9e9088cae48c7620fe 100644
--- a/jbig2dec.spec
+++ b/jbig2dec.spec
@@ -1,11 +1,13 @@
-%define anolis_release 9
+%define anolis_release 2
 Name:		jbig2dec
-Version:	0.19
+Version:	0.20
 Release:	%{anolis_release}%{?dist}
 Summary:	A decoder implementation of the JBIG2 image compression format 
 License:	AGPLv3+
 URL:		http://jbig2dec.sourceforge.net/
 Source0:	https://github.com/ArtifexSoftware/ghostpdl-downloads/releases/download/gs9530/%{name}-%{version}.tar.gz
+Patch:          CVE-2023-46361.patch
+
 Requires:	%{name}-libs = %{version}-%{release}
 BuildRequires:	libpng-devel
 BuildRequires:  zlib-devel
@@ -90,6 +92,12 @@ The %{name}-doc package contains documentation files for %{name}
 %doc CHANGES README
 
 %changelog
+* Sun Apr 27 2025 mgb01105731 <mgb01105731@alibaba-inc.com> - 0.20-2
+- Add patch to fix CVE-2023-46361
+
+* Fri Feb 21 2025 Xiaoping Liu <lxp01404969@alibaba-inc.com> - 0.20-1
+- update to 0.20 from 0.19
+
 * Thu Dec 21 2023 mgb01105731 <mgb01105731@alibaba-inc.com> - 0.19-9
 - rebuild