diff --git a/1003-Backport-patch-to-fix-CVE-2025-4373.patch b/1003-Backport-patch-to-fix-CVE-2025-4373.patch
new file mode 100644
index 0000000000000000000000000000000000000000..a08a580cb056524d790ad887d02e8f06bcb39bea
--- /dev/null
+++ b/1003-Backport-patch-to-fix-CVE-2025-4373.patch
@@ -0,0 +1,115 @@
+From cc647f9e46d55509a93498af19659baf9c80f2e3 Mon Sep 17 00:00:00 2001
+From: Michael Catanzaro <mcatanzaro@redhat.com>
+Date: Thu, 10 Apr 2025 10:57:20 -0500
+Subject: [PATCH] gstring: carefully handle gssize parameters
+
+Wherever we use gssize to allow passing -1, we need to ensure we don't
+overflow the value by assigning a gsize to it without checking if the
+size exceeds the maximum gssize. The safest way to do this is to just
+use normal gsize everywhere instead and use gssize only for the
+parameter.
+
+Our computers don't have enough RAM to write tests for this. I tried
+forcing string->len to high values for test purposes, but this isn't
+valid and will just cause out of bounds reads/writes due to
+string->allocated_len being unexpectedly small, so I don't think we can
+test this easily.
+---
+ glib/gstring.c | 36 +++++++++++++++++++++++-------------
+ 1 file changed, 23 insertions(+), 13 deletions(-)
+
+diff --git a/glib/gstring.c b/glib/gstring.c
+index 5279ed3cca..d79a4849c0 100644
+--- a/glib/gstring.c
++++ b/glib/gstring.c
+@@ -480,8 +480,9 @@ g_string_insert_len (GString     *string,
+     return string;
+ 
+   if (len < 0)
+-    len = strlen (val);
+-  len_unsigned = len;
++    len_unsigned = strlen (val);
++  else
++    len_unsigned = len;
+ 
+   if (pos < 0)
+     pos_unsigned = string->len;
+@@ -778,10 +779,12 @@ g_string_insert_c (GString *string,
+   g_string_maybe_expand (string, 1);
+ 
+   if (pos < 0)
+-    pos = string->len;
++    pos_unsigned = string->len;
+   else
+-    g_return_val_if_fail ((gsize) pos <= string->len, string);
+-  pos_unsigned = pos;
++    {
++      pos_unsigned = pos;
++      g_return_val_if_fail (pos_unsigned <= string->len, string);
++    }
+ 
+   /* If not just an append, move the old stuff */
+   if (pos_unsigned < string->len)
+@@ -814,6 +817,7 @@ g_string_insert_unichar (GString  *string,
+                          gssize    pos,
+                          gunichar  wc)
+ {
++  gsize pos_unsigned;
+   gint charlen, first, i;
+   gchar *dest;
+ 
+@@ -855,15 +859,18 @@ g_string_insert_unichar (GString  *string,
+   g_string_maybe_expand (string, charlen);
+ 
+   if (pos < 0)
+-    pos = string->len;
++    pos_unsigned = string->len;
+   else
+-    g_return_val_if_fail ((gsize) pos <= string->len, string);
++    {
++      pos_unsigned = pos;
++      g_return_val_if_fail (pos_unsigned <= string->len, string);
++    }
+ 
+   /* If not just an append, move the old stuff */
+-  if ((gsize) pos < string->len)
+-    memmove (string->str + pos + charlen, string->str + pos, string->len - pos);
++  if (pos_unsigned < string->len)
++    memmove (string->str + pos_unsigned + charlen, string->str + pos_unsigned, string->len - pos_unsigned);
+ 
+-  dest = string->str + pos;
++  dest = string->str + pos_unsigned;
+   /* Code copied from g_unichar_to_utf() */
+   for (i = charlen - 1; i > 0; --i)
+     {
+@@ -921,6 +928,7 @@ g_string_overwrite_len (GString     *string,
+                         const gchar *val,
+                         gssize       len)
+ {
++  gsize len_unsigned;
+   gsize end;
+ 
+   g_return_val_if_fail (string != NULL, NULL);
+@@ -932,14 +940,16 @@ g_string_overwrite_len (GString     *string,
+   g_return_val_if_fail (pos <= string->len, string);
+ 
+   if (len < 0)
+-    len = strlen (val);
++    len_unsigned = strlen (val);
++  else
++    len_unsigned = len;
+ 
+-  end = pos + len;
++  end = pos + len_unsigned;
+ 
+   if (end > string->len)
+     g_string_maybe_expand (string, end - string->len);
+ 
+-  memcpy (string->str + pos, val, len);
++  memcpy (string->str + pos, val, len_unsigned);
+ 
+   if (end > string->len)
+     {
+-- 
+GitLab
+
diff --git a/glib2.spec b/glib2.spec
index 9d7969dbcbfcd2afa2008f1848fd04f2f43e4a3c..9906b79a4082db9362906e503c43641e2484cefb 100644
--- a/glib2.spec
+++ b/glib2.spec
@@ -1,4 +1,4 @@
-%define anolis_release 4
+%define anolis_release 5
 Name: glib2
 Version: 2.78.3
 Release: %{anolis_release}%{?dist}
@@ -12,6 +12,8 @@ Source0: https://download.gnome.org/sources/glib/2.78/glib-%{version}.tar.xz
 Patch1001:     1001-Backport-patch-to-fix-CVE-2025-3360.patch
 # Reference to https://gitlab.gnome.org/GNOME/glib/-/commit/25833cefda24c60af913d6f2d532b5afd608b821
 Patch1002:     1002-Backport-patch-to-fix-CVE-2024-52533.patch
+# Reference to https://gitlab.gnome.org/GNOME/glib/-/commit/cc647f9e46d55509a93498af19659baf9c80f2e3
+Patch1003:     1003-Backport-patch-to-fix-CVE-2025-4373.patch
 
 BuildRequires: gcc meson >= 0.60.0 gettext gtk-doc perl-interpreter glibc-devel
 BuildRequires: systemtap-sdt-devel zlib-devel python3-devel
@@ -156,6 +158,9 @@ touch %{buildroot}%{_libdir}/gio/modules/giomodule.cache
 %doc NEWS README.md
 
 %changelog
+* Thu May 22 2025 Cheng Yang <yc02267530@alibaba-inc.com> - 2.78.3-5
+- Fix CVE-2025-4373
+
 * Tue May 06 2025 Cheng Yang <yc02267530@alibaba-inc.com> - 2.78.3-4
 - Fix CVE-2024-52533