diff --git a/ansible/install_config/group_vars/rpm_version.yml b/ansible/install_config/group_vars/rpm_version.yml
index 60969de2..ef63a074 100644
--- a/ansible/install_config/group_vars/rpm_version.yml
+++ b/ansible/install_config/group_vars/rpm_version.yml
@@ -62,9 +62,9 @@ mrzcpd_rpm_version:
 
 
 sapp_rpm_version:
-  sapp: sapp-4.2.94.851bb08
+  sapp: sapp-4.2.95.7448abe
   tcpdump_mesa: tcpdump_mesa-1.0.13.6ec67f5
-  sapp-pr: sapp-pr-4.2.94.851bb08
+  sapp-pr: sapp-pr-4.2.95.7448abe
 
 tfe_rpm_version:
   tfe: tfe-4.7.02.a2a4c32
@@ -74,7 +74,7 @@ tsg_app_rpm_version:
   app_sketch_local: app_sketch_local-4.5.5.7a60af1
 
 tsg_master_rpm_version:
-  tsg_master: tsg_master-5.10.6.4ba6f09
+  tsg_master: tsg_master-5.10.7.bbc31c8
 
 shaping_master_rpm_version:
   shaping_master: shaping_master-1.1.0.75d8306
@@ -90,8 +90,8 @@ wannat_wangw_rpm_version:
   libwannat_common: libwannat_common-1.0.3.6dc42b6
 
 wire_graft_rpm_version:
-  wire_graft: wire_graft_plug-1.5.8.211f1f1
-  libwire_graft: libwire_graft-1.5.8.211f1f1
+  wire_graft: wire_graft_plug-1.5.9.c858f08
+  libwire_graft: libwire_graft-1.5.9.c858f08
 
 hasp_update_rpm_version:
   hasp_update: hasp_update-1.0.1.b836a3b
diff --git a/ansible/roles/firewall/templates/main.conf.j2.j2 b/ansible/roles/firewall/templates/main.conf.j2.j2
index fb39706a..b68d50ee 100644
--- a/ansible/roles/firewall/templates/main.conf.j2.j2
+++ b/ansible/roles/firewall/templates/main.conf.j2.j2
@@ -142,7 +142,7 @@ dns_flood_thresh="{{ ddossketch.dns_flood_report_thresh }}"
 {% if dp_steering_firewall.enable_mirror == 1 %}
 [TRAFFIC_MIRROR]
 TRAFFIC_MIRROR_ENABLE=1
-NIC_NAME={{ dp_traffic_mirror.nic_name }}
+NIC_NAME="{{ dp_traffic_mirror.nic_name }}"
 DEFAULT_VLAN_ID={{ dp_traffic_mirror.traffic_mirror_vlan_id }}
 {% endif %}
 [RADIUS_PLUG]
@@ -160,12 +160,12 @@ DEFAULT_VLAN_ID={{ dp_traffic_mirror.traffic_mirror_vlan_id }}
 {% if data_center.name is not defined and device.tags is not defined %}
 {{ device.tags }}
 {% endif %}
-DEVICE_TAGS={"tags":[{{ tags_list | join(",") }}]}
+DEVICE_TAGS="{"tags":[{{ tags_list | join(",") }}]}"
 {% endraw %}
 PACKET_TYPE_FLAG=16
-COLLECT_TOPIC=RADIUS-RECORD
+COLLECT_TOPIC="RADIUS-RECORD"
 SERVICE_ID=162
-LOG_PATH=./log/radius_collect_plug/radius_collect_plug
+LOG_PATH="./log/radius_collect_plug/radius_collect_plug"
 LOG_LEVEL=30
 
 [GTP_SIGNALING]
@@ -176,7 +176,7 @@ SENDLOG_SWITCH=0
 {% endif %}
 {% endraw %}
 #NO/HASH/REDIS
-SIGNALING_ORIGIN=REDIS
+SIGNALING_ORIGIN="REDIS"
 
 [CAPTURE]
 {% raw %}
diff --git a/ansible/roles/sapp/tasks/main.yml b/ansible/roles/sapp/tasks/main.yml
index 65360be8..79d3e978 100644
--- a/ansible/roles/sapp/tasks/main.yml
+++ b/ansible/roles/sapp/tasks/main.yml
@@ -8,6 +8,12 @@
     download_dir: "{{ path_download }}"
   with_dict: "{{ sapp_rpm_version }}"
 
+- name: "download rpm packages: jemalloc"
+  yum:
+    name: "jemalloc"
+    conf_file: "{{ rpm_repo_config_path }}"
+    state: present
+
 - name: "Create directory /opt/tsg/framework and /opt/tsg/sapp if they not exist"
   file:
     path: "{{ item }}"
diff --git a/ansible/roles/traffic-engine/files/helm/conf/main.conf b/ansible/roles/traffic-engine/files/helm/conf/main.conf
index cc05e38c..c2a9a3ae 100644
--- a/ansible/roles/traffic-engine/files/helm/conf/main.conf
+++ b/ansible/roles/traffic-engine/files/helm/conf/main.conf
@@ -120,14 +120,14 @@ TRAFFIC_MIRROR_ENABLE=1
 {{- else }}
 TRAFFIC_MIRROR_ENABLE=0
 {{- end }}
-NIC_NAME={{ .Values.nic_mirror_name }}
+NIC_NAME="{{ .Values.nic_mirror_name }}"
 DEFAULT_VLAN_ID=0
 [RADIUS_PLUG]
-DEVICE_TAGS={"tags":[{{- include "traffic-engine.device-tag-list" . }}]}
+DEVICE_TAGS="{"tags":[{{- include "traffic-engine.device-tag-list" . }}]}"
 PACKET_TYPE_FLAG=16
-COLLECT_TOPIC=RADIUS-RECORD
+COLLECT_TOPIC="RADIUS-RECORD"
 SERVICE_ID=162
-LOG_PATH=./log/radius_collect_plug/radius_collect_plug
+LOG_PATH="./log/radius_collect_plug/radius_collect_plug"
 LOG_LEVEL=30
 
 {{- if eq .Values.decoders.GTPC .Values.define_enable_val_yes }}
@@ -138,7 +138,7 @@ SENDLOG_SWITCH=1
 SENDLOG_SWITCH=0
 {{- end }}
 #NO/HASH/REDIS
-SIGNALING_ORIGIN=REDIS
+SIGNALING_ORIGIN="REDIS"
 {{- end }}
 
 [CAPTURE]