diff --git a/php-8.0.27.tar.xz b/php-8.0.28.tar.xz
similarity index 57%
rename from php-8.0.27.tar.xz
rename to php-8.0.28.tar.xz
index 97c5839b2d3cdc6e38a0a13b49d558a96b0e725e..e45c8ff96f6e5eed1326385c4a2dfaa8de1fbc80 100644
Binary files a/php-8.0.27.tar.xz and b/php-8.0.28.tar.xz differ
diff --git a/php.spec b/php.spec
index 5792883cdc7efb4f3abd3e6ff667062c324455c3..2b7f5cbed36e0136bd4ccaa55715a9dfb58bfc96 100644
--- a/php.spec
+++ b/php.spec
@@ -22,7 +22,7 @@
 %global with_freetds    0
 %global with_sodium     0
 %global with_pspell     0
-%global upver           8.0.27
+%global upver           8.0.28
 
 Name:          php
 Version:       %{upver}
@@ -1088,6 +1088,10 @@ systemctl try-restart php-fpm.service >/dev/null 2>&1 || :
 
 
 %changelog
+* Tue Feb 21 2023 Dillon Chen <dillon.chen@gmail.com> - 8.0.28-1
+- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
+- update to 8.0.28
+
 * Mon Jan 16 2023 Dillon Chen <dillon.chen@gmail.com> - 8.0.27-1
 - New version 8.0.27
 - Fix CVE-2022-31631