diff --git a/exiv2-0.28.1.tar.gz b/exiv2-0.28.2.tar.gz
similarity index 82%
rename from exiv2-0.28.1.tar.gz
rename to exiv2-0.28.2.tar.gz
index 5e432c40500fdf27b2da8f2b1b0beedf465074f3..5916721df3ed837dcaf64f1aba443b5f7ea27f5f 100644
Binary files a/exiv2-0.28.1.tar.gz and b/exiv2-0.28.2.tar.gz differ
diff --git a/exiv2.spec b/exiv2.spec
index 456cf24afb28cf838b9d9e518ccaaf510390e2d8..bbd0bdb2285b583f1d1582cf499b6206a517c8f7 100644
--- a/exiv2.spec
+++ b/exiv2.spec
@@ -1,10 +1,10 @@
 Name:    exiv2
-Version: 0.28.1
+Version: 0.28.2
 Release: 1
 Summary: Exif, IPTC and XMP metadata and the ICC Profile
 License: GPLv2+
 URL:     http://www.exiv2.org/
-Source0: https://github.com/Exiv2/exiv2/archive/refs/tags/%{name}-%{version}.tar.gz
+Source0: https://github.com/Exiv2/exiv2/archive/v%{version}/%{name}-%{version}.tar.gz
 
 Provides: exiv2-libs = %{version}-%{release} 
 Obsoletes: exiv2-libs < %{version}-%{release} 
@@ -43,7 +43,7 @@ make doc
 %install
 %make_install
 %find_lang exiv2 --with-man
-chrpath -d %{buildroot}%{_libdir}/libexiv2.so.0.28.1
+chrpath -d %{buildroot}%{_libdir}/libexiv2.so.0.28.2
 chrpath -d %{buildroot}%{_bindir}/%{name}
 
 
@@ -66,7 +66,7 @@ test -x %{buildroot}%{_libdir}/libexiv2.so
 %{_libdir}/pkgconfig/exiv2.pc
 %{_libdir}/libexiv2.so
 %{_includedir}/exiv2/
-%{_datadir}/cmake/exiv2/
+%{_libdir}/cmake/exiv2/
 
 %files help
 %defattr(-,root,root)
@@ -74,6 +74,9 @@ test -x %{buildroot}%{_libdir}/libexiv2.so
 %{_pkgdocdir}/
 
 %changelog
+* Sat Feb 17 2024 yaoxin <yao_xin001@hoperun.com> - 0.28.2-1
+- Upgrade to 0.28.2 for fix CVE-2024-25112 and CVE-2024-24826
+
 * Thu Nov 09 2023 yaoxin <yao_xin001@hoperun.com> - 0.28.1-1
 - Upgrade to 0.28.1 for fix CVE-2023-44398