diff --git a/php-8.2.27.tar.xz b/php-8.2.28.tar.xz
similarity index 59%
rename from php-8.2.27.tar.xz
rename to php-8.2.28.tar.xz
index b8635b6958d35cef88129f4ad470bfced23bbf55..a052d82f0841d25120703c5d5c4b2b06a7f9f454 100644
Binary files a/php-8.2.27.tar.xz and b/php-8.2.28.tar.xz differ
diff --git a/php.spec b/php.spec
index 270f487d83e055d7e9548cb60d60005884dcdc18..3538753a096bd83faa9a7bb1d862940ae5c191c7 100644
--- a/php.spec
+++ b/php.spec
@@ -42,7 +42,7 @@
 
 Summary: PHP scripting language for creating dynamic web sites
 Name: php
-Version: 8.2.27
+Version: 8.2.28
 Release: %{anolis_release}%{?dist}
 # All files licensed under PHP version 3.01, except
 # Zend is licensed under Zend
@@ -1511,6 +1511,10 @@ systemctl try-restart php-fpm.service >/dev/null 2>&1 || :
 
 
 %changelog
+* Mon Jun 27 2025 lzq11122 <lzq02303433@alibaba-inc.com> - 8.2.28-1
+- Update to version 8.2.28 from 8.2.27
+- fix cve-2025-1734 cve-2025-1736 cve-2025-1861 cve-2025-1217 cve-2025-1219
+ 
 * Tue Jan 14 2025 yangxinyu <yangxinyu@nfschina.com> - 8.2.27-1
 - Update to version 8.2.27
 - fix cve-2024-8929 cve-2024-11233 cve-2024-11234