diff --git a/microcode_ctl-2.1-19.tar.xz b/microcode_ctl-2.1-19.tar.xz
deleted file mode 100644
index eedbf2ab11ff0958eeefee633395cc2940e27f56..0000000000000000000000000000000000000000
Binary files a/microcode_ctl-2.1-19.tar.xz and /dev/null differ
diff --git a/microcode_ctl-2.1-31.tar.xz b/microcode_ctl-2.1-31.tar.xz
new file mode 100644
index 0000000000000000000000000000000000000000..8c3d11c67d18d655ce2ff0ae31a1109f334fcfa8
Binary files /dev/null and b/microcode_ctl-2.1-31.tar.xz differ
diff --git a/microcode_ctl.spec b/microcode_ctl.spec
index c6d26cca83509cd2cb7ed42ee0b0810692769b57..e7c49615e1da0f0a92557dd51c41ed0b2f1a96ec 100644
--- a/microcode_ctl.spec
+++ b/microcode_ctl.spec
@@ -1,10 +1,10 @@
 %global debug_package %{nil}
-%define upstream_version 2.1-19
+%define upstream_version 2.1-31
 
 Name:           microcode_ctl
 Summary:        Microcode update for CPU
 Version:        2.1
-Release:        27
+Release:        28
 License:        GPLv2+ and Redistributable, no modification permitted
 URL:            https://pagure.io/microcode_ctl
 ExclusiveArch:  %{ix86} x86_64
@@ -27,5 +27,8 @@ make DESTDIR=%{buildroot} PREFIX=%{_prefix} INSDIR=/usr/sbin install clean
 %doc /usr/share/doc/microcode_ctl/*
 
 %changelog
+* Mon Dec 14 2020 zhanghua <zhanghua40@huawei.com> - 2.1-28
+- update version to 2.1-31, fix CVE-2020-8695, CVE-2020-8696, CVE-2020-8698
+
 * Thu Nov 7 2019 openEuler Buildteam <buildteam@openeuler.org> - 2.1-27
 - Package init