diff --git a/mysql-boost-8.0.28.tar.gz b/mysql-boost-8.0.28.tar.gz
new file mode 100644
index 0000000..8ad21a2
Binary files /dev/null and b/mysql-boost-8.0.28.tar.gz differ
diff --git a/mysql.spec b/mysql.spec
index e5581e2..44dfcb7 100644
--- a/mysql.spec
+++ b/mysql.spec
@@ -6,7 +6,7 @@
 %global pkgnamepatch mysql
 %global boost_bundled_version 1.73.0
 Name:              mysql
-Version:           8.0.27
+Version:           8.0.28
 Release:           1
 License:           GPLv2 with exceptions and LGPLv2 and BSD
 Summary:           The world's most popular open source database
@@ -113,6 +113,9 @@ fi
 %exclude /usr/lib/debug
 
 %changelog
+* Tue Jan 25 yaoxin <yaoxin30@huawei.com> - 8.0.28-1
+- Upgrade mysql to 8.0.28 to fix cves.
+
 * Wed Nov 24 yaoxin <yaoxin30@huawei.com> - 8.0.27-1
 - Upgrade mysql to 8.0.27,fix CVES:CVE-2021-2471 CVE-2021-2478 CVE-2021-2479
   CVE-2021-2481  CVE-2021-35546 CVE-2021-35575 CVE-2021-35577 CVE-2021-35591