diff --git a/.git-lfs.spec.swp b/.git-lfs.spec.swp
deleted file mode 100644
index f4e6a09ad01a8e429085d9156dda66d904828375..0000000000000000000000000000000000000000
Binary files a/.git-lfs.spec.swp and /dev/null differ
diff --git a/git-lfs-v3.4.0.tar.gz b/git-lfs-v3.4.0.tar.gz
deleted file mode 100644
index ef216cbcd41d16db00489b736675b35d6162ea95..0000000000000000000000000000000000000000
Binary files a/git-lfs-v3.4.0.tar.gz and /dev/null differ
diff --git a/git-lfs-v3.6.1.tar.gz b/git-lfs-v3.6.1.tar.gz
new file mode 100644
index 0000000000000000000000000000000000000000..0f47bec4985f22e3c9bc89e9ea9eee8fcf01afb4
Binary files /dev/null and b/git-lfs-v3.6.1.tar.gz differ
diff --git a/git-lfs.spec b/git-lfs.spec
index b8a3dec81cf299e9002223fb6a2abaf91378cb69..f919dd090626cbc425a23e7713913422781d955e 100644
--- a/git-lfs.spec
+++ b/git-lfs.spec
@@ -4,13 +4,18 @@
 %define debug_package %{nil}
 
 Name:           git-lfs
-Version:        3.4.0
+Version:        3.6.1
 Release: 	%{anolis_release}%{?dist}
 Summary:        Git extension for versioning large files
 
 License:        MIT
 URL:            https://git-lfs.github.io/
 Source0:        https://github.com/%{name}/%{name}/releases/download/v%{version}/%{name}-v%{version}.tar.gz
+# vendor.tar.xz generated by:
+# cd %{name}-%{version}/
+# go mod vendor
+# go build -mod=vendor
+# tar -cJf vendor.tar.xz vendor/
 Source1:        vendor.tar.xz
 
 BuildRequires:  gnupg2
@@ -54,7 +59,6 @@ for section in 1 5 7; do
     install -Dpm0644 man/man${section}/*.${section} %{buildroot}%{_mandir}/man${section}/
 done
 
-
 %post
 %{_bindir}/%{name} install --system --skip-repo
 
@@ -82,6 +86,11 @@ go test -x -mod=vendor
 %doc README.md CHANGELOG.md docs
 
 %changelog
+* Thu Feb 13 2025 mgb01105731 <mgb01105731@alibaba-inc.com> - 3.6.1-1
+- Update to 3.6.1 from 3.4.0
+- Update vendor.tar.xz
+- Fix CVE-2024-53263
+
 * Mon Nov  6 2023 Wenlong Zhang <zhangwenlong@loongson.cn> - 3.4.0-1
 - update to 3.4.0
 
diff --git a/vendor.tar.xz b/vendor.tar.xz
index a417521e2ce0699d1de253584a653e268ff1d390..5049fde3e8d1d622a472d46d93a4ef387bb2f123 100644
Binary files a/vendor.tar.xz and b/vendor.tar.xz differ