diff --git a/mysql-boost-8.0.27.tar.gz b/mysql-boost-8.0.27.tar.gz
deleted file mode 100644
index e69de29bb2d1d6434b8b29ae775ad8c2e48c5391..0000000000000000000000000000000000000000
diff --git a/mysql-boost-8.0.27.tar.gz.ab b/mysql-boost-8.0.27.tar.gz.ab
deleted file mode 100644
index cbd5972f91da1599dbe11bf6cd79046f81f681dc..0000000000000000000000000000000000000000
Binary files a/mysql-boost-8.0.27.tar.gz.ab and /dev/null differ
diff --git a/mysql-boost-8.0.27.tar.gz.ac b/mysql-boost-8.0.27.tar.gz.ac
deleted file mode 100644
index 4993c7a5b8521806d4f2ef07af4e4b7263a813af..0000000000000000000000000000000000000000
Binary files a/mysql-boost-8.0.27.tar.gz.ac and /dev/null differ
diff --git a/mysql-boost-8.0.27.tar.gz.aa b/mysql-boost-8.0.28.tar.gz
similarity index 35%
rename from mysql-boost-8.0.27.tar.gz.aa
rename to mysql-boost-8.0.28.tar.gz
index 37d59229b8ff3d995a2defdd5eab18956702d5c7..8ad21a2a592843a634577f7c714565b5c5b531ef 100644
Binary files a/mysql-boost-8.0.27.tar.gz.aa and b/mysql-boost-8.0.28.tar.gz differ
diff --git a/mysql.spec b/mysql.spec
index ae6ceaa1466e5f07b7be3fa086cb147ae086d445..71c703c4b2706cf328ed1d07f0d050472f04d2a9 100644
--- a/mysql.spec
+++ b/mysql.spec
@@ -6,15 +6,12 @@
 %global pkgnamepatch mysql
 %global boost_bundled_version 1.73.0
 Name:              mysql
-Version:           8.0.27
+Version:           8.0.28
 Release:           1
 License:           GPLv2 with exceptions and LGPLv2 and BSD
 Summary:           The world's most popular open source database
 URL:               http://www.mysql.com/
 Source0:           https://dev.mysql.com/get/Downloads/MySQL-8.0/%{name}-boost-%{version}.tar.gz
-Source1:           %{name}-boost-%{version}.tar.gz.aa
-Source2:           %{name}-boost-%{version}.tar.gz.ab
-Source3:           %{name}-boost-%{version}.tar.gz.ac
 Patch0:0000-mysql-add-fstack-protector-strong.patch
 Patch1:%{pkgnamepatch}-install-test.patch
 Patch3:%{pkgnamepatch}-file-contents.patch
@@ -47,9 +44,6 @@ the GPL. See the chapter "Licensing and Support" in the manual for
 further info.
 
 %prep
-cd ../SOURCES
-cat %{SOURCE1} %{SOURCE2} %{SOURCE3} | tar xj
-cd ..
 %setup -q -n %{name}-%{version}
 %patch0 -p1
 %patch1 -p1
@@ -121,6 +115,9 @@ fi
 %exclude /usr/lib/debug
 
 %changelog
+* Sat Jan 29 2022 wangkai <wangkai385@huawei.com> 8.0.28-1
+- Upgrade mysql to 8.0.28 for fix cves
+
 * Wed Nov 24 yaoxin <yaoxin30@huawei.com> - 8.0.27-1
 - Upgrade mysql to 8.0.27,fix CVES:CVE-2021-2471 CVE-2021-2478 CVE-2021-2479
   CVE-2021-2481  CVE-2021-35546 CVE-2021-35575 CVE-2021-35577 CVE-2021-35591