diff --git a/aiohttp-3.8.4.tar.gz b/aiohttp-3.8.4.tar.gz
deleted file mode 100644
index f749f1b..0000000
Binary files a/aiohttp-3.8.4.tar.gz and /dev/null differ
diff --git a/aiohttp-3.8.5.tar.gz b/aiohttp-3.8.5.tar.gz
new file mode 100644
index 0000000..b902886
Binary files /dev/null and b/aiohttp-3.8.5.tar.gz differ
diff --git a/python-aiohttp.spec b/python-aiohttp.spec
index 2a6c2c3..ef0bf64 100644
--- a/python-aiohttp.spec
+++ b/python-aiohttp.spec
@@ -1,6 +1,6 @@
 %global _empty_manifest_terminate_build 0
 Name:           python-aiohttp
-Version:        3.8.4
+Version:        3.8.5
 Release:        1
 Summary:        Async http client/server framework (asyncio)
 License:        Apache 2
@@ -81,6 +81,9 @@ mv %{buildroot}/doclist.lst .
 %{_docdir}/*
 
 %changelog
+* Mon Aug 14 2023 yaoxin <yao_xin001@hoperun.com> - 3.8.5-1
+- Upgrade to 3.8.5 for fix CVE-2023-37276
+
 * Wed May 17 2023 Ge Wang <wang__ge@126.com> - 3.8.4-1
 - update to 3.8.4