diff --git a/rails-5.2.3.gem b/rails-5.2.3.gem
deleted file mode 100644
index 7b91574..0000000
Binary files a/rails-5.2.3.gem and /dev/null differ
diff --git a/rails-5.2.4.4.gem b/rails-5.2.4.4.gem
new file mode 100644
index 0000000..3310068
Binary files /dev/null and b/rails-5.2.4.4.gem differ
diff --git a/rubygem-rails.spec b/rubygem-rails.spec
index 06c73d3..cdb8132 100644
--- a/rubygem-rails.spec
+++ b/rubygem-rails.spec
@@ -1,7 +1,7 @@
 %global gem_name rails
 Name:                rubygem-%{gem_name}
 Epoch:               1
-Version:             5.2.3
+Version:             5.2.4.4
 Release:             1
 Summary:             Full-stack web application framework
 License:             MIT
@@ -43,5 +43,10 @@ cp -a .%{gem_dir}/* \
 %doc %{gem_instdir}/README.md
 
 %changelog
+* Wed Feb 03 2021 shinwell_hu <micromotive@qq.com> - 5.2.4.4-1
+- Upgrade to 5.2.4.4 to fix following CVE issue
+  CVE-2020-8165
+  CVE-2020-8162
+
 * Thu Aug 20 2020 luoshengwei <luoshengwei@huawei.com> - 5.2.3-1
 - package init