diff --git a/redis-7.2.7.tar.gz b/redis-7.2.8.tar.gz
similarity index 32%
rename from redis-7.2.7.tar.gz
rename to redis-7.2.8.tar.gz
index efe8186f6b44a920ce70bf62ba2c4e325fcd9cde..f31257572b14cbc21972adefaf3d393629bbbfe4 100644
Binary files a/redis-7.2.7.tar.gz and b/redis-7.2.8.tar.gz differ
diff --git a/redis.spec b/redis.spec
index 7bb4fab62b595444c31748ee314ed3ae9ec91653..12d091cd49c37902ff4b03d15ed14f6b6bb000a3 100644
--- a/redis.spec
+++ b/redis.spec
@@ -1,4 +1,4 @@
-%define anolis_release 2
+%define anolis_release 1
 
 # temp workaround to https://bugzilla.redhat.com/2059488
 %undefine _package_note_file
@@ -11,7 +11,7 @@
 %global macrosdir %(d=%{_rpmconfigdir}/macros.d; [ -d $d ] || d=%{_sysconfdir}/rpm; echo $d)
 
 Name:              redis
-Version:           7.2.7
+Version:           7.2.8
 Release:           %{anolis_release}%{?dist}
 Summary:           A persistent key-value database
 # redis, hiredis: BSD-3-Clause
@@ -288,6 +288,9 @@ fi
 
 
 %changelog
+* Fri May 16 2025 mgb01105731 <mgb01105731@alibaba-inc.com> - 7.2.8-1
+- Update to 7.2.8 to fix CVE-2025-21605
+
 * Mon Mar 31 2025 xunian <xunian@nfschina.com> - 7.2.7-2
 - Add sw_64 support