diff --git a/exiv2.spec b/exiv2.spec
index d041ee86052a96bca545dd5aed68b0c9f5284dd2..1f2fe13d8dc33ee28ba04fe5cd343b8e0c258331 100644
--- a/exiv2.spec
+++ b/exiv2.spec
@@ -2,7 +2,7 @@
 
 Summary: Exif and Iptc metadata manipulation library
 Name:    exiv2
-Version: 0.28.2
+Version: 0.28.5
 Release: %{anolis_release}%{dist}
 
 License: GPLv2+
@@ -95,6 +95,12 @@ BuildArch: noarch
 
 
 %changelog
+* Mon Mar 31 2025 mgb01105731 <mgb01105731@alibaba-inc.com> - 0.28.5-1
+- #IBXI5K
+- Update to 0.28.5 to fix CVE-2022-3756
+- Project: TC2024080204
+- Signed-off-by: mgb01105731 <mgb01105731@alibaba-inc.com>
+
 * Wed Feb 14 2024 Funda Wang <fundawang@yeah.net> - 0.28.2-1
 - New version 0.28.2
 
diff --git a/v0.28.2.tar.gz b/v0.28.5.tar.gz
similarity index 80%
rename from v0.28.2.tar.gz
rename to v0.28.5.tar.gz
index 5916721df3ed837dcaf64f1aba443b5f7ea27f5f..d72c8889d0f36b1c5de175f2c97a284a1959a16b 100644
Binary files a/v0.28.2.tar.gz and b/v0.28.5.tar.gz differ