diff --git a/1-bugfix-for-CVE-2025-22874.patch b/1-bugfix-for-CVE-2025-22874.patch
new file mode 100644
index 0000000000000000000000000000000000000000..f079749c42ffdcc5f52ed2d3a6f15b09307e975e
--- /dev/null
+++ b/1-bugfix-for-CVE-2025-22874.patch
@@ -0,0 +1 @@
+test1
\ No newline at end of file
diff --git a/2-bugfix-for-CVE-2025-22874.patch b/2-bugfix-for-CVE-2025-22874.patch
new file mode 100644
index 0000000000000000000000000000000000000000..d606037cb232bfda7788a8322492312d55b2ae9d
--- /dev/null
+++ b/2-bugfix-for-CVE-2025-22874.patch
@@ -0,0 +1 @@
+test2
\ No newline at end of file
diff --git a/3-bugfix-for-CVE-2025-22874.patch b/3-bugfix-for-CVE-2025-22874.patch
new file mode 100644
index 0000000000000000000000000000000000000000..f079749c42ffdcc5f52ed2d3a6f15b09307e975e
--- /dev/null
+++ b/3-bugfix-for-CVE-2025-22874.patch
@@ -0,0 +1 @@
+test1
\ No newline at end of file
diff --git a/4-bugfix-for-CVE-2025-22874.patch b/4-bugfix-for-CVE-2025-22874.patch
new file mode 100644
index 0000000000000000000000000000000000000000..d606037cb232bfda7788a8322492312d55b2ae9d
--- /dev/null
+++ b/4-bugfix-for-CVE-2025-22874.patch
@@ -0,0 +1 @@
+test2
\ No newline at end of file
diff --git a/git-lfs.spec b/git-lfs.spec
index f919dd090626cbc425a23e7713913422781d955e..04093d7b976e2c0c6221d5df6292bba510904a27 100644
--- a/git-lfs.spec
+++ b/git-lfs.spec
@@ -1,4 +1,8 @@
-%define anolis_release 1
+Patch1: 1-bugfix-for-CVE-2025-22874.patch
+Patch2: 2-bugfix-for-CVE-2025-22874.patch
+Patch3: 3-bugfix-for-CVE-2025-22874.patch
+Patch4: 4-bugfix-for-CVE-2025-22874.patch
+%define anolis_release 3
 %bcond_without check
 %undefine _missing_build_ids_terminate_build
 %define debug_package %{nil}
@@ -86,6 +90,12 @@ go test -x -mod=vendor
 %doc README.md CHANGELOG.md docs
 
 %changelog
+* Thu Jun 19 2025 tomcruiseqi <10762123+tomcruiseqi@user.noreply.gitee.com> - 3.6.1-3
+- Fix CVE-2025-22874
+
+* Thu Jun 19 2025 tomcruiseqi <10762123+tomcruiseqi@user.noreply.gitee.com> - 3.6.1-2
+- Fix CVE-2025-22874
+
 * Thu Feb 13 2025 mgb01105731 <mgb01105731@alibaba-inc.com> - 3.6.1-1
 - Update to 3.6.1 from 3.4.0
 - Update vendor.tar.xz