diff --git a/arm-trusted-firmware.spec b/arm-trusted-firmware.spec
index 87b20c6a951ff9fd7f906d8ae21d34a1a855a217..21e704859f1970f13df591f40d727753dbef7554 100644
--- a/arm-trusted-firmware.spec
+++ b/arm-trusted-firmware.spec
@@ -1,22 +1,15 @@
-%define anolis_release 3
+%define anolis_release 1
 
 %global debug_package %{nil}
 
 Name:    arm-trusted-firmware
-Version: 2.8
+Version: 2.10.0
 Release: %{anolis_release}%{dist}
 Summary: ARM Trusted Firmware
 License: BSD
 URL:     https://github.com/ARM-software/arm-trusted-firmware
 Source0: https://github.com/ARM-software/arm-trusted-firmware/archive/refs/tags/v%{version}.tar.gz
 Source1: aarch64-bl31
-Patch0001:  0001-atf-2.8-fix-linking.patch
-# https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/commit/?id=fd37982a19a4a291
-Patch0002:  CVE-2022-47630-1.patch
-# https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/commit/?id=72460f50e2437a85
-Patch0003:  CVE-2022-47630-2.patch
-# https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/commit/?id=f5c51855d36e399e
-Patch0004:  CVE-2022-47630-3.patch
 
 ExclusiveArch: aarch64
 BuildRequires: gcc dtc
@@ -107,6 +100,10 @@ done
 %doc readme.rst
 
 %changelog
+* Fri Jul 4 2025 lzq11122 <lzq02303433@alibaba-inc.com> - 2.10.0-1
+- Remove all patch update to 2.10.0
+- fix CVE-2023-49100
+
 * Wed Dec 04 2024 Zhongkun He <hezhongkun@inspur.com> - 2.8-3
 - Fix CVE-2022-47630
 
diff --git a/v2.8.tar.gz b/v2.10.0.tar.gz
similarity index 47%
rename from v2.8.tar.gz
rename to v2.10.0.tar.gz
index 191e6e2d3238cff2262d16f947a6e702d0c077f6..0ab873d178696533289f154b34953d895e71ded3 100644
Binary files a/v2.8.tar.gz and b/v2.10.0.tar.gz differ