diff --git a/jasper-4.2.7.tar.gz b/jasper-4.2.8.tar.gz
similarity index 54%
rename from jasper-4.2.7.tar.gz
rename to jasper-4.2.8.tar.gz
index c98de4967fccea9e9659d18e879a2fca5343fb68..3ca81bde0615ad1615f7c982d51a5d8da3786e5c 100644
Binary files a/jasper-4.2.7.tar.gz and b/jasper-4.2.8.tar.gz differ
diff --git a/jasper.spec b/jasper.spec
index b852607ec7e7d172109a1be731579105144a509b..3992de6e3773b03bbd55c8b7faf778fac516f8d7 100644
--- a/jasper.spec
+++ b/jasper.spec
@@ -1,5 +1,5 @@
 Name:                jasper
-Version:             4.2.7
+Version:             4.2.8
 Release:             1
 Summary:             Reference implementation of the codec specified in the JPEG-2000 standard, Part 1
 License:             JasPer-2.0
@@ -35,7 +35,7 @@ Nonessential utilities of jasper, including jiv and tmrdemo.
 %package_help
 
 %prep
-%autosetup -n  %{name}-%{version} -p1
+%autosetup -n  %{name}-version-%{version} -p1
 
 %build
 %cmake \
@@ -77,6 +77,10 @@ export LD_LIBRARY_PATH="`pwd`/%{__cmake_builddir}/src/libjasper/"
 %doc README.md
 
 %changelog
+* Thu Sep 04 2025 Yu Peng <yupeng@kylinos.cn> - 4.2.8-1
+- Upgrade to 4.2.8. Fixed a bug in the JPC decoder that could cause bad memory accesses
+if the debug level is set sufficiently high
+
 * Mon Aug 25 2025  openeuler_bot <infra@openeuler.sh> - 4.2.7-1
 - Added some missing range checking on several coding parameters in the JPC encoder (version:4.2.7).