diff --git a/exiv2.spec b/exiv2.spec
index f0c4b852825a5d8b69c6dea287400aa5a5fa2943..e052de6d92f8152e9da1993536a05472466b321e 100644
--- a/exiv2.spec
+++ b/exiv2.spec
@@ -1,5 +1,5 @@
 Name:    exiv2
-Version: 0.28.5
+Version: 0.28.6
 Release: 1
 Summary: Exif, IPTC and XMP metadata and the ICC Profile
 License: GPL-2.0-or-later AND BSD-3-Clause
@@ -62,6 +62,9 @@ This package provides head file,libraries for exiv2.
 %{_pkgdocdir}/
 
 %changelog
+* Mon Sep 01 2025 Yu Peng <yupeng@kylinos.cn> - 0.28.6-1
+- Update to 0.28.6 for fix CVE-2025-55304 and CVE-2025-54080.
+
 * Mon Feb 24 2025 Funda Wang <fundawang@yeah.net> - 0.28.5-1
 - update to 0.28.5
 
diff --git a/v0.28.5.tar.gz b/v0.28.6.tar.gz
similarity index 32%
rename from v0.28.5.tar.gz
rename to v0.28.6.tar.gz
index d45e3482d62f15db094d4fa467339ace04f8978c..3d8d9403074a5650b5fc2ca1313f82fbdc3dd490 100644
--- a/v0.28.5.tar.gz
+++ b/v0.28.6.tar.gz
@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:e1671f744e379a87ba0c984617406fdf8c0ad0c594e5122f525b2fb7c28d394d
-size 46932602
+oid sha256:9d481117b97afa5324bf3ea0ad79f5c2939ae94ba0d0f5f8eb23aee16d9ec58d
+size 46934906