diff --git a/shadowsocks-rust-1.17.1.tar.gz b/shadowsocks-rust-1.17.1.tar.gz
deleted file mode 100644
index 86fbac3..0000000
--- a/shadowsocks-rust-1.17.1.tar.gz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:97a1c8ebf7fd19de94cd6d0dfee398667e1f4e131ec8a37ecb7c3191af7cc75e
-size 311414
diff --git a/shadowsocks-rust-1.18.3.tar.gz b/shadowsocks-rust-1.18.3.tar.gz
new file mode 100644
index 0000000..e4f9534
--- /dev/null
+++ b/shadowsocks-rust-1.18.3.tar.gz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:0eb817d81e6827e65593c67d4eef6a1136ca84a1c33cf4c97b3a84e98e5a7f60
+size 444662
diff --git a/shadowsocks-rust.changes b/shadowsocks-rust.changes
index 4579c6e..815d96f 100644
--- a/shadowsocks-rust.changes
+++ b/shadowsocks-rust.changes
@@ -1,3 +1,25 @@
+-------------------------------------------------------------------
+Mon Apr 22 14:26:29 UTC 2024 - Hillwood Yang <hillwood@opensuse.org>
+
+- Update version to 1.18.3
+  * Support outbound_fwmark in server side to split outbound tunnel
+  * Default build for *-windows-* targets includes sswinservice
+  * local-fakedns: Add a basic implementation of Fake-DNS, which will
+    allocate IPs from pool for DNS queries. This experimental feature
+    could be useful when using local-tun, local-redir or other features
+    that could only receive IP destinations, the domain name that is
+    resolved by the Fake-DNS will be translated from IP back to domain
+    name when connecting to the remote
+  * Add launchd_udp_socket_name, launchd_tcp_socket_name to basic config format
+  * local-tun: Support tun_interface_destination configuration key
+  * Default logging framework changed to tracing-subscriber
+  * local: socks local server will support SOCKS5, SOCKS4a, HTTP proxy
+    protocols when local-http, local-socks4 features are enabled
+  * local: Support setting udp_mtu in configuration file to actively reject
+    packet.size > MTU
+  * Fix bugs
+- Add fix-boo-1223239.patch, fix CVE-2024-32650 boo#1223239
+
 -------------------------------------------------------------------
 Wed Dec 13 13:55:57 UTC 2023 - Hillwood Yang <hillwood@opensuse.org>
 
diff --git a/shadowsocks-rust.spec b/shadowsocks-rust.spec
index 64ff6d2..83ff7a6 100644
--- a/shadowsocks-rust.spec
+++ b/shadowsocks-rust.spec
@@ -1,7 +1,7 @@
 #
 # spec file for package shadowsocks-rust
 #
-# Copyright (c) 2023 SUSE LLC
+# Copyright (c) 2024 SUSE LLC
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -17,13 +17,16 @@
 
 
 Name:           shadowsocks-rust
-Version:        1.17.1
+Version:        1.18.3
 Release:        0
 Summary:        Rust port of Shadowsocks
 License:        MIT
 Group:          Productivity/Networking/Web/Proxy
 URL:            https://github.com/shadowsocks/shadowsocks-rust
 Source0:        https://github.com/shadowsocks/shadowsocks-rust/archive/v%{version}/%{name}-%{version}.tar.gz
+# PATCH-FIX-UPSTREAM fix-boo-1223239.patch hillwood@opensuse.org - Fix CVE-2024-32650 boo#1223239
+# https://github.com/shadowsocks/shadowsocks-rust/pull/1513
+Patch0:         fix-boo-1223239.patch
 Source1:        vendor.tar.gz
 Source2:        %{name}.json
 Source3:        %{name}-client.service
@@ -45,7 +48,7 @@ shadowsocks is a lightweight secured SOCKS5 proxy for embedded devices and
 low-end boxes.
 
 %prep
-%setup -q -a1 -n %{name}-%{version}
+%autosetup -p1 -a1 -n %{name}-%{version}
 mkdir .cargo
 cat >>.cargo/config.toml <<EOF
 [source.crates-io]
diff --git a/vendor.tar.gz b/vendor.tar.gz
index 51ade6e..c1e8076 100644
--- a/vendor.tar.gz
+++ b/vendor.tar.gz
@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:11c5b7ad0fedcf2a81c5580d8f1b1f0bc81cc291c3041b84717948eccd2a17a7
-size 98663166
+oid sha256:9fcb5166eb269d62b6c74208bf8e40386ae0cce8f221f8f32190fb42600c897b
+size 99269719