diff --git a/.oebuild/manifest.yaml b/.oebuild/manifest.yaml
index ed2d21a527ed6f7fa3a21d4f472501213c0fd357..6cabc8fc5351be358a58a931d98ac4d6fe64d202 100644
--- a/.oebuild/manifest.yaml
+++ b/.oebuild/manifest.yaml
@@ -983,7 +983,7 @@ manifest_list:
     version: 9ebb6c4aadbf43d791ac3c1f3c5f69fc30c45dcc
   libtheora:
     remote_url: https://gitee.com/src-openeuler/libtheora.git
-    version: 09519f6d0a7017a132dd212c311bee3201b386e3
+    version: cb58c2feb83280810e93199cd744d955265f2b0a
   libtirpc:
     remote_url: https://gitee.com/src-openeuler/libtirpc.git
     version: 9e9abd356a350e6646cfba4c82984f434a23e4ed
@@ -1016,7 +1016,7 @@ manifest_list:
     version: 2647a4ecc2acd233f3a0233c0f7919ce1fa66c71
   libvpx:
     remote_url: https://gitee.com/src-openeuler/libvpx.git
-    version: fb1c548fbdf9e8731aa4d3907ad73f9aec8da97f
+    version: b84829b0ec595086bbb55ce4184f52f40b874b68
   libwebp:
     remote_url: https://gitee.com/src-openeuler/libwebp.git
     version: 87d14559fe55fddd99020456ec44e675bc87d59d
@@ -1031,7 +1031,7 @@ manifest_list:
     version: efc36896ba8756287e436e3cc51b95e940c1e16a
   libxcvt:
     remote_url: https://gitee.com/src-openeuler/libxcvt.git
-    version: 0c4a236f854f9de32b244fee90e6a4abefa32370
+    version: 3ddd8fab7e6ed563f356197eb4bce23176fbf82a
   libxkbcommon:
     remote_url: https://gitee.com/src-openeuler/libxkbcommon.git
     version: d0974db12942fa832713b4cefb0107b12cfe07c2
@@ -1040,7 +1040,7 @@ manifest_list:
     version: 4758c3d45be0f877dbedabcea21a078249579f80
   libxml2:
     remote_url: https://gitee.com/src-openeuler/libxml2.git
-    version: 15e5370826c98fbf3e0c4b7d95bbdcf9349f66e5
+    version: 3bdd8403e8f3077e7c6ffbe8e3dd72fc3c3d8cb9
   libxshmfence:
     remote_url: https://gitee.com/src-openeuler/libxshmfence.git
     version: dd76c83b28cc18cb237fbbb9d5e82e38dd2a7cbc
@@ -1106,7 +1106,7 @@ manifest_list:
     version: 0910a1c3f045dc69c1e84afd99e94493a9a7e166
   make:
     remote_url: https://gitee.com/src-openeuler/make.git
-    version: 868a6e76175e3ec891b73df1598ebfd611ee39b9
+    version: b5f7413d57522a78f8a6bad9c7f46810b2fd9f23
   mali-bifrost-g52-g2p0:
     remote_url: https://gitee.com/emancipator/mali-bifrost-g52-g2p0.git
     version: 6c4033821d21ddb32b22b7eb2599ecc0bd536862
@@ -1142,10 +1142,10 @@ manifest_list:
     version: abdd168a786f299ed4655baa7227c8b4b90dddaa
   mosquitto:
     remote_url: https://gitee.com/src-openeuler/mosquitto.git
-    version: dbc7c87118e8a20306ee28fe7b13f7315bc2a124
+    version: cb4e4211cb8dc6ecad7c743f052834114cd0b2fa
   mpfr:
     remote_url: https://gitee.com/src-openeuler/mpfr.git
-    version: 69aed19ee2f65a401a5fc2a151f0a57721bf9326
+    version: f2b40ef2eabfa3bbe1c4c28650560be95686ea73
   mtd-utils:
     remote_url: https://gitee.com/src-openeuler/mtd-utils.git
     version: 78e00fa56de7f2db2b9aa4c9b7336b94ee5086ef
@@ -1187,13 +1187,13 @@ manifest_list:
     version: e8afff4af096b55a960025055c8324154290c2e1
   net-tools:
     remote_url: https://gitee.com/src-openeuler/net-tools.git
-    version: 02b4115eb1ab45d7a7460ab04129983fa26abfca
+    version: 1f772b101668fc44ae5b530d934730a112277b44
   nettle:
     remote_url: https://gitee.com/src-openeuler/nettle.git
     version: 9be49d59f19db21b5cc53fe12ca04d69623c041c
   newlib:
     remote_url: https://gitee.com/src-openeuler/newlib.git
-    version: 007e2d7bfd04d0bfa788cf65c8797774864dd548
+    version: 96a12b2cfe1abac9fde597a6aa22c2cfe0d63068
   nfs-utils:
     remote_url: https://gitee.com/src-openeuler/nfs-utils.git
     version: 1bcc14e3f92331b71291c9bc0b3942d985e00536
diff --git a/meta-openeuler/recipes-connectivity/mosquitto/mosquitto_%.bbappend b/meta-openeuler/recipes-connectivity/mosquitto/mosquitto_%.bbappend
index 9200c3e6603ea598b3fe70187ea11892300c5c41..532d80ab9f3e59d022f59789bc419f8bd150368d 100644
--- a/meta-openeuler/recipes-connectivity/mosquitto/mosquitto_%.bbappend
+++ b/meta-openeuler/recipes-connectivity/mosquitto/mosquitto_%.bbappend
@@ -1,12 +1,15 @@
 # main bbfile ref: 
 # https://git.openembedded.org/meta-openembedded/tree/meta-networking/recipes-connectivity/mosquitto/mosquitto_2.0.18.bb?h=master
 
-PV = "2.0.16"
+PV = "2.0.20"
 
 SRC_URI:append = " \
         file://${BP}.tar.gz \
-        file://add-usage-output.patch \
-        file://fix-usage-exit-code.patch \
+"
+
+SRC_URI:remove = " \
+        file://2894.patch \
+        file://1571.patch \
 "
 
 BBCLASSEXTEND += "native nativesdk"
diff --git a/meta-openeuler/recipes-core/libcgroup/libcgroup_%.bbappend b/meta-openeuler/recipes-core/libcgroup/libcgroup_%.bbappend
index c04c9616b410614ed6862368f7bfcfcb13448d04..a0988b8286ef757c5a3d99c61533ed84da178a4c 100644
--- a/meta-openeuler/recipes-core/libcgroup/libcgroup_%.bbappend
+++ b/meta-openeuler/recipes-core/libcgroup/libcgroup_%.bbappend
@@ -1,10 +1,14 @@
 # the main bb file: yocto-poky/meta/recipes-core/libcgroup/libcgroup_2.0.2.bb
 
-PV = "2.0.3"
+PV = "3.1.0"
 
+LIC_FILES_CHKSUM = "file://COPYING;md5=4d794c5d710e5b3547a6cc6a6609a641"
 SRC_URI:prepend = " \
             file://${BP}.tar.gz \
             file://config.patch \
+            file://Add-support-for-multiple-controllers-on-same-mount-point.patch \
 "
 
 SRC_URI[sha256sum] = "b29b5704de3d0fadf199fe4e17eeeaecba7f0dd1b85569c96eec37c7672e3026"
+
+DEPENDS += "systemd-units pam flex coreutils systemd"
diff --git a/meta-openeuler/recipes-core/libxml/libxml2_%.bbappend b/meta-openeuler/recipes-core/libxml/libxml2_%.bbappend
index 96df6f81e7bcfb9d6ddc8625d77898f1d4c7cfef..dced606f57adb1cf9140687868807970a6f6b056 100644
--- a/meta-openeuler/recipes-core/libxml/libxml2_%.bbappend
+++ b/meta-openeuler/recipes-core/libxml/libxml2_%.bbappend
@@ -1,5 +1,5 @@
 # version in openEuler
-PV = "2.11.5"
+PV = "2.11.9"
 
 # remove all poky patches for 2.11.4 and apply openEuler source package
 SRC_URI = "file://${BP}.tar.xz \
@@ -7,7 +7,11 @@ SRC_URI = "file://${BP}.tar.xz \
            file://backport-CVE-2023-45322.patch \
            file://backport-xpath-Remove-remaining-references-to-valueFrame.patch \
            file://backport-examples-Don-t-call-xmlCleanupParser-and-xmlMemoryDu.patch \
-           file://backport-CVE-2024-25062.patch \
+           file://backport-CVE-2024-56171.patch \
+           file://backport-CVE-2025-24928.patch \
+           file://backport-CVE-2025-27113.patch \
+           file://backport-CVE-2025-32414.patch \
+           file://backport-CVE-2025-32415.patch \
            "
 
 # remove test configuration, because test package not in openEuler
diff --git a/meta-openeuler/recipes-core/newlib/newlib_%.bb b/meta-openeuler/recipes-core/newlib/newlib_%.bb
index 58042538bfdbdc6d83e227285e006692a181d795..e452b85c9efa6d2334885a3b6c322c940c6b4eb3 100644
--- a/meta-openeuler/recipes-core/newlib/newlib_%.bb
+++ b/meta-openeuler/recipes-core/newlib/newlib_%.bb
@@ -27,6 +27,7 @@ LIC_FILES_CHKSUM = " \
 SRC_URI = " \
 		file://${BP}.tar.gz \
 		file://Modify-neon-instruction.patch \
+                file://fix-CVE-2024-30949.patch \
 		"
 SRC_URI[sha256sum] = "58dd9e3eaedf519360d92d84205c3deef0b3fc286685d1c562e245914ef72c66"
 
diff --git a/meta-openeuler/recipes-extended/net-tools/net-tools_%.bbappend b/meta-openeuler/recipes-extended/net-tools/net-tools_%.bbappend
index 5954d652f28f51eb1d6250fc843de2de22198b53..a5601fda1be15bca682233467c82f282772dd44b 100644
--- a/meta-openeuler/recipes-extended/net-tools/net-tools_%.bbappend
+++ b/meta-openeuler/recipes-extended/net-tools/net-tools_%.bbappend
@@ -10,4 +10,5 @@ S = "${WORKDIR}/${BP}"
 SRC_URI:prepend = "file://${BP}.tar.xz \
         file://backport-net-tools-cycle.patch \
         file://backport-net-tools-man.patch \
+        file://backport-Revert-sscanf-pattern-is-Lu-not-llu-for-long-long-unsigned.patch \
         "
diff --git a/meta-openeuler/recipes-multimedia/libtheora/libtheora_%.bbappend b/meta-openeuler/recipes-multimedia/libtheora/libtheora_%.bbappend
index 0ced1f4fd15b8ecfeff91c262b81b59588d0e18b..9d200f61e52b8841f3cb8e4a73392a79483286e3 100644
--- a/meta-openeuler/recipes-multimedia/libtheora/libtheora_%.bbappend
+++ b/meta-openeuler/recipes-multimedia/libtheora/libtheora_%.bbappend
@@ -5,6 +5,7 @@ SRC_URI:prepend = "file://${BP}.tar.xz \
            file://Fix-pp_sharp_mod-calculation.patch \
            file://examples-fix-underlinking.patch \
            file://examples-png_sizeof-no-longer-available-since-libpng.patch \
+           file://backport-fix-CVE-2024-56431.patch \
 "
 
 SRC_URI[sha256sum] = "f36da409947aa2b3dcc6af0a8c2e3144bc19db2ed547d64e9171c59c66561c61"
diff --git a/meta-openeuler/recipes-multimedia/webm/libvpx_%.bbappend b/meta-openeuler/recipes-multimedia/webm/libvpx_%.bbappend
index aa82b07a422f9758f884480324face4ef3f110cb..e70b988a78d1241404278f393bc4e487c7ef64d2 100644
--- a/meta-openeuler/recipes-multimedia/webm/libvpx_%.bbappend
+++ b/meta-openeuler/recipes-multimedia/webm/libvpx_%.bbappend
@@ -9,6 +9,7 @@ SRC_URI:prepend = " \
     file://CVE-2024-5197-1.patch \
     file://CVE-2024-5197-2.patch \
     file://CVE-2024-5197-3.patch \
+    file://add-sw_64-support.patch \
 "
 
 S = "${WORKDIR}/${BP}"