diff --git a/openjdk-1.8.0.spec b/openjdk-1.8.0.spec
index dc32c3b6b0c3cfc7a532611a48592725bfd2e555..477381e6c5be8227685a200b726f1e69ec0fd948 100644
--- a/openjdk-1.8.0.spec
+++ b/openjdk-1.8.0.spec
@@ -925,7 +925,7 @@ Provides: java-%{javaver}-%{origin}-accessibility%{?1} = %{epoch}:%{version}-%{r
 
 Name:    java-%{javaver}-%{origin}
 Version: %{javaver}.%{updatever}.%{buildver}
-Release: 2
+Release: 3
 # java-1.5.0-ibm from jpackage.org set Epoch to 1 for unknown reasons
 # and this change was brought into RHEL-4. java-1.5.0-ibm packages
 # also included the epoch in their virtual provides. This created a
@@ -2546,6 +2546,9 @@ cjc.mainProgram(args)
 %endif
 
 %changelog
+* Thu Nov 9 2023 kuenking111 <wangkun49@huawei.com> - 1:1.8.0.392-b08.3
+- fix CVE-2023-22067 and CVE-2023-22081
+
 * Mon Oct 30 2023 kuenking111 <wangkun49@huawei.com> - 1:1.8.0.392-b08.2
 - remove add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
 - remove add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch