diff --git a/aiohttp-3.8.4.tar.gz b/aiohttp-3.8.5.tar.gz
similarity index 49%
rename from aiohttp-3.8.4.tar.gz
rename to aiohttp-3.8.5.tar.gz
index f749f1b8e51dc522e8f2a14f4f0376e3ff175f22..b902886011a320e435ca283b6d6c3abae722bb46 100644
Binary files a/aiohttp-3.8.4.tar.gz and b/aiohttp-3.8.5.tar.gz differ
diff --git a/python-aiohttp.spec b/python-aiohttp.spec
index 2a6c2c3bf505ae182326975c62ac313c816a69e2..ef0bf649e8dd43bfae0540fb3062fe35ea1d7164 100644
--- a/python-aiohttp.spec
+++ b/python-aiohttp.spec
@@ -1,6 +1,6 @@
 %global _empty_manifest_terminate_build 0
 Name:           python-aiohttp
-Version:        3.8.4
+Version:        3.8.5
 Release:        1
 Summary:        Async http client/server framework (asyncio)
 License:        Apache 2
@@ -81,6 +81,9 @@ mv %{buildroot}/doclist.lst .
 %{_docdir}/*
 
 %changelog
+* Mon Aug 14 2023 yaoxin <yao_xin001@hoperun.com> - 3.8.5-1
+- Upgrade to 3.8.5 for fix CVE-2023-37276
+
 * Wed May 17 2023 Ge Wang <wang__ge@126.com> - 3.8.4-1
 - update to 3.8.4