diff --git a/zephyr-3.2.0.tar.gz b/lts3-zephyr-3.7.1.tar.gz
old mode 100755
new mode 100644
similarity index 65%
rename from zephyr-3.2.0.tar.gz
rename to lts3-zephyr-3.7.1.tar.gz
index 5623d31d2c7bbf05c6d9d3ec17c71a36ece74cef..08609cf245f1935ecd8ab957c09985baee5fe260
Binary files a/zephyr-3.2.0.tar.gz and b/lts3-zephyr-3.7.1.tar.gz differ
diff --git a/zephyr-4.0.0.tar.gz b/zephyr-4.0.0.tar.gz
new file mode 100644
index 0000000000000000000000000000000000000000..de0dc2f61e2af7866e1fdf52ebdcf0dba6c46867
Binary files /dev/null and b/zephyr-4.0.0.tar.gz differ
diff --git a/zephyr.spec b/zephyr.spec
index abb53e8d9a147f4c71b7cdc3531926767bd91a3c..15aa632821e29930cd6fbbba54b1a2113a2b5705 100644
--- a/zephyr.spec
+++ b/zephyr.spec
@@ -1,24 +1,38 @@
 Name: zephyr
-Version: 3.2.0
-Release: 0
+Version: 4.0.0
+Release: 1
 Summary: Zephyr real time operating system
 
 License: Apache-2.0
+Source0: %{name}-%{version}.tar.gz
 
 BuildRequires:	cmake
 BuildRequires:	gcc
 BuildRequires:	gcc-c++
-BuildRequires:	python
+BuildRequires:  python3
 BuildRequires:	dtc
 BuildRequires:  gperf
+AutoReqProv: no
 
 %description
 The Zephyr Project is a scalable real-time operating system (RTOS) supporting multiple hardware
 architectures, optimized for resource constrained devices, and built with security in mind
 
+%prep
+%setup -q -n %{name}-%{version}
+
+%install
+rm -rf ${RPM_BUILD_ROOT}
+mkdir -p ${RPM_BUILD_ROOT}%{_libdir}/%{name}-%{version}
+cp -ra %{_builddir}/%{name}-%{version}/* ${RPM_BUILD_ROOT}%{_libdir}/%{name}-%{version}
+
 %files
+/*
 
 %changelog
+* Mon Dec 16 2024 ZhaoYu Jiang <jiangzhaoyu@kylinos.cn> - 4.0.0-1
+- Update Package to 4.0.0, Update Zephyr3 LTS Version to 3.7.1, Keep Zephyr2 LTS Version. Rebuild spec file, permit zephyr sdk installation.
+- Fix CVE-2024-8798.
 
 * Wed Oct 5  2022 Wayne Ren <renwei41@huawei.com> - 3.2.0
 * Wed May 4  2022 Wayne Ren <renwei41@huawei.com> - 3.0.0