diff --git a/redis-7.2.7.tar.gz b/redis-7.2.8.tar.gz
similarity index 32%
rename from redis-7.2.7.tar.gz
rename to redis-7.2.8.tar.gz
index efe8186f6b44a920ce70bf62ba2c4e325fcd9cde..f31257572b14cbc21972adefaf3d393629bbbfe4 100644
Binary files a/redis-7.2.7.tar.gz and b/redis-7.2.8.tar.gz differ
diff --git a/redis.spec b/redis.spec
index a6235e77a1f320ac74ce2748a43d397f99ccbd7d..403aa929e9c4835fd72b007b0a32d40d0771a209 100644
--- a/redis.spec
+++ b/redis.spec
@@ -11,7 +11,7 @@
 %global macrosdir %(d=%{_rpmconfigdir}/macros.d; [ -d $d ] || d=%{_sysconfdir}/rpm; echo $d)
 
 Name:              redis
-Version:           7.2.7
+Version:           7.2.8
 Release:           %{anolis_release}%{?dist}
 Summary:           A persistent key-value database
 # redis, hiredis: BSD-3-Clause
@@ -286,6 +286,9 @@ fi
 
 
 %changelog
+* Fri May 16 2025 mgb01105731 <mgb01105731@alibaba-inc.com> - 7.2.8-1
+- Update to 7.2.8 to fix CVE-2025-21605
+
 * Mon Feb 24 2025 yangxinyu <yangxinyu@nfschina.com> - 7.2.7-1
 - New version 7.2.7
 - For CVE-2024-51741