diff --git a/openssl-3.0.7.tar.gz b/openssl-3.0.8.tar.gz
similarity index 63%
rename from openssl-3.0.7.tar.gz
rename to openssl-3.0.8.tar.gz
index b70d1f44df1456afa79744fbf0da61534546793d..6a01626a8446c04a3ce8cb33287e0a8feb89e1bf 100644
Binary files a/openssl-3.0.7.tar.gz and b/openssl-3.0.8.tar.gz differ
diff --git a/openssl.spec b/openssl.spec
index 477357e519356bd3eaaf3d05c2b8278972e296ee..0b86c8218a0afd333d064cfb42725cd36bffc811 100644
--- a/openssl.spec
+++ b/openssl.spec
@@ -1,8 +1,8 @@
 %define soversion 3
 Name:        openssl
 Epoch:       1
-Version:     3.0.7
-Release:     2
+Version:     3.0.8
+Release:     1
 Summary:     Cryptography and SSL/TLS Toolkit
 License:     OpenSSL and SSLeay
 URL:         https://www.openssl.org/
@@ -206,6 +206,9 @@ make test || :
 %ldconfig_scriptlets libs
 
 %changelog
+* Tue Feb 7 2023 wangcheng <wangcheng156@huawei.com> - 1:3.0.8-1
+- upgrade to 3.0.8 for fixing CVEs
+
 * Tue Feb 7 2023 wangcheng <wangcheng156@huawei.com> - 1:3.0.7-2
 - disable sctp in openssl building