diff --git a/mysql-boost-8.0.27.tar.gz b/mysql-boost-8.0.28.tar.gz
similarity index 90%
rename from mysql-boost-8.0.27.tar.gz
rename to mysql-boost-8.0.28.tar.gz
index 90a19c72843a6ad3548438c32854644f903045bc..8ad21a2a592843a634577f7c714565b5c5b531ef 100644
Binary files a/mysql-boost-8.0.27.tar.gz and b/mysql-boost-8.0.28.tar.gz differ
diff --git a/mysql.spec b/mysql.spec
index 25136116a01ad30316c1366dcc55abb83572c681..0fddd2fb467a6253c837f255e05e3c151504c9fc 100644
--- a/mysql.spec
+++ b/mysql.spec
@@ -6,7 +6,7 @@
 %global pkgnamepatch mysql
 %global boost_bundled_version 1.73.0
 Name:              mysql
-Version:           8.0.27
+Version:           8.0.28
 Release:           1
 License:           GPLv2 with exceptions and LGPLv2 and BSD
 Summary:           The world's most popular open source database
@@ -113,6 +113,9 @@ fi
 %exclude /usr/lib/debug
 
 %changelog
+* Tue Jan 25 yaoxin <yaoxin30@huawei.com> - 8.0.28-1
+- Upgrade mysql to 8.0.28 to fix cves.
+
 * Wed Nov 24 yaoxin <yaoxin30@huawei.com> - 8.0.27-1
 - Upgrade mysql to 8.0.27,fix CVES:CVE-2021-2471 CVE-2021-2478 CVE-2021-2479
   CVE-2021-2481  CVE-2021-35546 CVE-2021-35575 CVE-2021-35577 CVE-2021-35591