diff --git a/bind-9.18.27.tar.xz.asc b/bind-9.18.27.tar.xz.asc
deleted file mode 100644
index 4dc535f1f1d75bbc36bf9a104e64eb94f5f9e6ee..0000000000000000000000000000000000000000
--- a/bind-9.18.27.tar.xz.asc
+++ /dev/null
@@ -1,16 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iQIzBAABCgAdFiEEcGtsKGIOdvkdEfffUQpkKgbFLOwFAmY6DEcACgkQUQpkKgbF
-LOwbQQ/7B3netZ0er8j5iMfTsalXKrgdTafhwN5SEQdZuxWKFBiuGZmydiDUqr9i
-YMyAhpsf3+uHGtvn5NeDkp2J+RDwZW5qqv+o+cjTVso0VbrzRmnhkSXagV1++10i
-rZtHNGp4cFXU6nSXczsWSPhE51vKCvMxqA0xPONRpnczto8yw+GYhgaoCeOdO0Y9
-k+ZoeUgVyEK4KGg60RvxqEchA7T883BZD9zUCr1/E9DwTqUAe22CfQ6j6IXIq5Cl
-cFYqgy1AcG+YvVFhwaA0PPBW+b+RevXW7FRILQ/oELwyjZrMjS+3Z0uATPy7AjL+
-Zkh22BPsAQebSsUAbX6p59I8XyxzdxJwMXSC/jYaIhknFLvC4v6L3QlGOpY7DviD
-v03n6a2n0PdXdm1WzbG8S+hcVNrlzXqaYT4HAFjrBpTWvvRP3+JXel7OLSRDDuyQ
-J5Y6nZiMLnhAmN2QfqM5vFXHgEACN8zHC1vYoPdmMScWFiW1d48Q4RKvY1oVmSJZ
-c/4ZCqZMOZXbe+6gvYO8xJXBTveX/inS4no05JNork2s7gkr/hcGk2NDly8+yTIx
-STdiOHtcKyuv0YV1yfY5WFN9i0nHQsbrcpsmWVNyX/zqle3Qjg4d4zBhqUryDDX6
-XaIE7cWt26h98U4Hzx1Iq9jhnlqERUY+AX+8w1q2zZ2VjXKcNV8=
-=YjPE
------END PGP SIGNATURE-----
diff --git a/bind-9.18.27.tar.xz b/bind-9.18.28.tar.xz
similarity index 43%
rename from bind-9.18.27.tar.xz
rename to bind-9.18.28.tar.xz
index ab7f08c0ad6ddd7f12ac643b76d004f779f0e55e..df7ea7ff417708a7ef8750f479caf567d5b7b96f 100644
Binary files a/bind-9.18.27.tar.xz and b/bind-9.18.28.tar.xz differ
diff --git a/bind-9.18.28.tar.xz.asc b/bind-9.18.28.tar.xz.asc
new file mode 100644
index 0000000000000000000000000000000000000000..3c11d42a4812256257f6d63c6b17c4e53aa62edf
--- /dev/null
+++ b/bind-9.18.28.tar.xz.asc
@@ -0,0 +1,16 @@
+-----BEGIN PGP SIGNATURE-----
+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+=K3Mi
+-----END PGP SIGNATURE-----
diff --git a/bind.spec b/bind.spec
index 10a39d740fce7018e5021c9809a2544a160dc8e6..94b158b2b835773dcb3d8f3d241c6dfa79438e71 100644
--- a/bind.spec
+++ b/bind.spec
@@ -30,7 +30,7 @@
 Summary:  The Berkeley Internet Name Domain (BIND) DNS (Domain Name System) server
 Name:     bind
 License:  MPLv2.0
-Version:  9.18.27
+Version:  9.18.28
 Release:  %{anolis_release}%{?dist}
 Epoch:    32
 Url:      https://www.isc.org/downloads/bind/
@@ -868,6 +868,10 @@ fi;
 %endif
 
 %changelog
+* Tue Oct 08 2024 Kaiqiang Wang <wangkaiqiang@inspur.com> - 32:9.18.28-1
+- update to 9.18.28
+- fix CVE-2024-1975 CVE-2024-1737 
+
 * Fri Aug 02 2024 Kaiqiang Wang <wangkaiqiang@inspur.com> - 32:9.18.27-1
 - update to 9.18.27
 - fix CVE-2024-1975