diff --git a/openssl-3.0.7.tar.gz b/openssl-3.0.8.tar.gz
similarity index 63%
rename from openssl-3.0.7.tar.gz
rename to openssl-3.0.8.tar.gz
index b70d1f4..6a01626 100644
Binary files a/openssl-3.0.7.tar.gz and b/openssl-3.0.8.tar.gz differ
diff --git a/openssl.spec b/openssl.spec
index 477357e..0b86c82 100644
--- a/openssl.spec
+++ b/openssl.spec
@@ -1,8 +1,8 @@
 %define soversion 3
 Name:        openssl
 Epoch:       1
-Version:     3.0.7
-Release:     2
+Version:     3.0.8
+Release:     1
 Summary:     Cryptography and SSL/TLS Toolkit
 License:     OpenSSL and SSLeay
 URL:         https://www.openssl.org/
@@ -206,6 +206,9 @@ make test || :
 %ldconfig_scriptlets libs
 
 %changelog
+* Tue Feb 7 2023 wangcheng <wangcheng156@huawei.com> - 1:3.0.8-1
+- upgrade to 3.0.8 for fixing CVEs
+
 * Tue Feb 7 2023 wangcheng <wangcheng156@huawei.com> - 1:3.0.7-2
 - disable sctp in openssl building