diff --git a/rails-5.2.3.gem b/rails-5.2.4.4.gem
similarity index 36%
rename from rails-5.2.3.gem
rename to rails-5.2.4.4.gem
index 7b915743b86c44f763bb5f2b298118f304d0f7ec..3310068a7057ffcc18dab23472053abb0cd9f98f 100644
Binary files a/rails-5.2.3.gem and b/rails-5.2.4.4.gem differ
diff --git a/rubygem-rails.spec b/rubygem-rails.spec
index 06c73d3b68248522f7f0d5fe686c8c1f49d5d455..cdb8132f861f63f4bc7227b9c1330d26227d0aae 100644
--- a/rubygem-rails.spec
+++ b/rubygem-rails.spec
@@ -1,7 +1,7 @@
 %global gem_name rails
 Name:                rubygem-%{gem_name}
 Epoch:               1
-Version:             5.2.3
+Version:             5.2.4.4
 Release:             1
 Summary:             Full-stack web application framework
 License:             MIT
@@ -43,5 +43,10 @@ cp -a .%{gem_dir}/* \
 %doc %{gem_instdir}/README.md
 
 %changelog
+* Wed Feb 03 2021 shinwell_hu <micromotive@qq.com> - 5.2.4.4-1
+- Upgrade to 5.2.4.4 to fix following CVE issue
+  CVE-2020-8165
+  CVE-2020-8162
+
 * Thu Aug 20 2020 luoshengwei <luoshengwei@huawei.com> - 5.2.3-1
 - package init