diff --git a/rack-2.0.4.gem b/rack-2.0.4.gem
deleted file mode 100644
index 6f947734f2ba06ae5792d8e7bcb4139c46a9b680..0000000000000000000000000000000000000000
Binary files a/rack-2.0.4.gem and /dev/null differ
diff --git a/rack-2.0.8.gem b/rack-2.0.8.gem
new file mode 100644
index 0000000000000000000000000000000000000000..b4d9c01c291914f964f4b11b9dbfc294d8242688
Binary files /dev/null and b/rack-2.0.8.gem differ
diff --git a/rubygem-rack.spec b/rubygem-rack.spec
index 973c6ba54d7974613d541381fb031dda74f66fef..6933474f8b8d619d9e4a07b099ed23d9b83ce089 100644
--- a/rubygem-rack.spec
+++ b/rubygem-rack.spec
@@ -1,8 +1,8 @@
 %global gem_name rack
 Name:		rubygem-rack		
-Version:	2.0.4
+Version:	2.0.8
 Epoch:		1
-Release:	2
+Release:	1
 Summary:	A modular Ruby webserver interface
 License:	MIT and BSD	
 URL:		https://github.com/rack/rack
@@ -75,6 +75,9 @@ done
 %{gem_instdir}/%{gem_name}.gemspec
 
 %changelog
+* Tue Nov 9 2021 wangkai <wangkai385@huawei.com> - 1:2.0.8-1
+- Update to 2.0.8 for fix CVE-2019-16782
+
 * Wed Sep 9 2020 Ge Wang <wangge20@huawei.com> - 1:2.0.4-2
 - Modify Source0 Url