diff --git a/.gitignore b/.gitignore
index 362fdee..f7bbbbf 100644
--- a/.gitignore
+++ b/.gitignore
@@ -13,3 +13,5 @@ php-7.4*.xz*
 /php-8.2.13.tar.xz.asc
 /php-8.2.25.tar.xz
 /php-8.2.25.tar.xz.asc
+/php-8.2.28.tar.xz
+/php-8.2.28.tar.xz.asc
diff --git a/php.spec b/php.spec
index e422132..b6e6a64 100644
--- a/php.spec
+++ b/php.spec
@@ -64,7 +64,7 @@
 %bcond_without   modphp
 %bcond_without   db4
 
-%global upver        8.2.25
+%global upver        8.2.28
 
 Summary: PHP scripting language for creating dynamic web sites
 Name: php
@@ -1536,6 +1536,9 @@ systemctl try-restart php-fpm.service >/dev/null 2>&1 || :
 
 
 %changelog
+* Wed Sep  3 2025 Remi Collet <rcollet@redhat.com> - 8.2.28-1
+- rebase to 8.2.28
+
 * Tue Nov 12 2024 Remi Collet <rcollet@redhat.com> - 8.2.25-1
 - rebase to 8.2.25 RHEL-66166
 
diff --git a/sources b/sources
index 9a003a8..6f9f851 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
-SHA512 (php-8.2.25.tar.xz) = 47a4a6ea8e77c4e5965c385a016755e8b6700acc8e3fa728b0596efcf72dc9bb39a1c68a10733c4106fdad1f037d1582fd42856778a3d3224a9b15b9665bc360
-SHA512 (php-8.2.25.tar.xz.asc) = 0760b40366484c19cf10a2d8f79f36c5bed3222b5d8f60d9263dab30a47cfb25edfce69c19f6d179d3a167579b0a979a101c3c63646aca997e36852fc09061ba
+SHA512 (php-8.2.28.tar.xz) = af2a4f43da756a78f762dbd2b9e589e52864c7069fd55a6a2b900e32a08728a7d69b80577dc79b5d4a86993846a2232b809b75ae415344935610a3934b10c6ba
+SHA512 (php-8.2.28.tar.xz.asc) = a00746ec9be427b6b33a6f73621057616e222d1826ca98abd081e3a7f9af476f48906e796bd177b6cc15bcb5b61845d2e2a83b23f2a9e52d635b7d14ff31243b