diff --git a/fio-3.34.tar.bz2.asc b/fio-3.34.tar.bz2.asc
deleted file mode 100644
index fdb8b4f938a8b984c83828844014e964b7c35562..0000000000000000000000000000000000000000
--- a/fio-3.34.tar.bz2.asc
+++ /dev/null
@@ -1,17 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iQJEBAABCAAuFiEEwPw5LcreJtl1+l5K99NY+ylx4KYFAmQQbHwQHGF4Ym9lQGtl
-cm5lbC5kawAKCRD301j7KXHgpmlnEACy27XAMADwNppafeWlHuT4easlUcHD7iTa
-S84deoVbhhS+AGMpdRqfBifnWL6U769DRChKBkNdmB9Gq313teAgRdosILrEIhhi
-F4pXnafIX3eayA5MQssyFmb4VLA3fgEOXIlBI9WhbZkbq6Dc4C7a9hr1w0Dt3UPX
-p7KbJ0j+4lbUoM7rzujTBjGqHwARNZrAm3V5jZ9crZnu2FUhYB5HXJn9P3be6vVK
-Oa0/n0TltPe65Qz45mOwL08lE9zq7UnZTMVI2VyCzL3G0Set2joH7v2AOhZLPWEf
-wpZPdVCpIo2ZRcxhATAiFzMMZ01l6xcDbYshq9FYbZBy5cQG39kule+gbCLRgecz
-GjofTfoT6VqqV/fOZQfdxMJZOzoI4Nxh19tjecsYaXSgMuO59O5GD7VQzAVUGSa+
-h593Xeh3BRngqyAVOEQN6L71R51kzZWRhNEEVZWQj6FOsZAVqAqbuFv2VnG1InUf
-PnSPG8TNEttU6Ge6LE9jXPRT5vzDcjOg89WQJsn65mxNmlG+sZbcXmiCZ6tik1tF
-hG61Y+6kKaEQIPgkj9r9ylqTK0TXYexRsgJE9EdhUmvMyA8ZEhP/m1YH63jmyrYT
-zDL+gCjDO9+EcdYgWrxf1xNEwWEmUPhwG4dS2pvBmdMmFyHs4PhnbziXnAM1gDMv
-vFMX0/J23g==
-=IIcm
------END PGP SIGNATURE-----
diff --git a/fio-3.34.tar.bz2 b/fio-3.36.tar.bz2
similarity index 48%
rename from fio-3.34.tar.bz2
rename to fio-3.36.tar.bz2
index d08db7cd559fd28d932aedf85bd1ab0fc3440c37..038eefc9c6c4ab9ad482f46c9aececabbfb94e12 100644
Binary files a/fio-3.34.tar.bz2 and b/fio-3.36.tar.bz2 differ
diff --git a/fio-3.36.tar.bz2.asc b/fio-3.36.tar.bz2.asc
new file mode 100644
index 0000000000000000000000000000000000000000..8654919612b1445bb574fda5f32061f26a01af43
--- /dev/null
+++ b/fio-3.36.tar.bz2.asc
@@ -0,0 +1,17 @@
+-----BEGIN PGP SIGNATURE-----
+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+=Rfyc
+-----END PGP SIGNATURE-----
diff --git a/fio.spec b/fio.spec
index f67b6e79e5d01196aa6f88930c71306d5d5f7db6..f4d59e6ce178d5c2eec21ae8d9b8eec9d5c011e8 100644
--- a/fio.spec
+++ b/fio.spec
@@ -1,18 +1,18 @@
-%define anolis_release 1
+%define anolis_release		1
 %bcond_with nbd
 %bcond_with rbd
 %bcond_with rados
 %bcond_with 
 
 Name:		fio
-Version:	3.34
+Version:	3.36
 Release:	%{anolis_release}%{?dist}
 Summary:	Multithreaded IO generation tool
 
 License:	GPLv2
 URL:		http://git.kernel.dk/?p=fio.git;a=summary
-Source0:	http://brick.kernel.dk/snaps/%{name}-%{version}.tar.bz2
-Source1:	https://brick.kernel.dk/snaps/%{name}-%{version}.tar.bz2.asc
+Source0:	http://brick.kernel.dk/snaps/fio-3.36.tar.bz2
+Source1:	https://brick.kernel.dk/snaps/fio-3.36.tar.bz2.asc
 Source2:	https://git.kernel.org/pub/scm/docs/kernel/pgpkeys.git/plain/keys/F7D358FB2971E0A6.asc
 
 Patch0001:	0001-engines-io_uring-add-sqthread_poll_percpu-option.patch
@@ -42,6 +42,8 @@ BuildRequires:	numactl-devel
 BuildRequires:	librdmacm-devel
 
 BuildRequires: make
+BuildRequires: libnbd-devel
+BuildRequires: librbd1-devel
 
 # Don't create automated dependencies for the fio engines.
 %global __provides_exclude_from ^%{_libdir}/fio/
@@ -241,6 +243,10 @@ make install prefix=%{_prefix} mandir=%{_mandir} libdir=%{_libdir}/fio DESTDIR=$
 %doc README.rst REPORTING-BUGS HOWTO.rst examples
 
 %changelog
+* Fri Sep 26 2025 zhoujiajia111 <zjl02254423@alibaba-inc.com> - 3.36-1
+- Updated to version 3.36 to fix CVE-2025-4035
+
+
 * Wed Jun 21 2023 Joseph Qi <joseph.qi@linux.alibaba.com> 3.34-1
 - update to 3.34 to support io_uring nvme passthrough