diff --git a/1-bugfix-for-CVE-2019-18388.patch b/1-bugfix-for-CVE-2019-18388.patch
new file mode 100644
index 0000000000000000000000000000000000000000..56d09076d5c3b13abec3a348fb11fad52ea03ff8
--- /dev/null
+++ b/1-bugfix-for-CVE-2019-18388.patch
@@ -0,0 +1,26 @@
+From 0d9a2c88dc3a70023541b3260b9f00c982abda16 Mon Sep 17 00:00:00 2001
+From: Gert Wollny <gert.wollny@collabora.com>
+Date: Thu, 10 Oct 2019 09:42:25 +0200
+Subject: [PATCH] vrend: Check resource creation more thoroughly
+
+While we are at it:
+  - free memory if texture allocation fails
+
+Closes #144
+Closes #145
+Closes #146
+
+v2: Move the error string creation to extra patch (Emil)
+v3: Fix whitespace errors (Emil) and one logic error
+
+Signed-off-by: Gert Wollny <gert.wollny@collabora.com>
+Reviewed-by: Emil Velikov <emil.velikov@collabora.com>
+ src/vrend_renderer.c | 58 ++++++++++++++++++++++++++++++++++++++++++--
+ 1 file changed, 56 insertions(+), 2 deletions(-)
+
+diff --git a/src/vrend_renderer.c b/src/vrend_renderer.c
+index 0c6b5efd3..1fb657b79 100644
+--- a/src/vrend_renderer.c
++++ b/src/vrend_renderer.c
+GitLab
+
diff --git a/virglrenderer.spec b/virglrenderer.spec
index 3bb399ad245c93a86ba30cfc048a2785e6854265..9b12afdeffa9ba525ab4cf3a58d5c7f234824dcc 100644
--- a/virglrenderer.spec
+++ b/virglrenderer.spec
@@ -1,4 +1,4 @@
-%define anolis_release 1
+%define anolis_release 2
 
 
 Name:		virglrenderer
@@ -10,6 +10,7 @@ License:	MIT
 
 Source0:	https://gitlab.freedesktop.org/virgl/virglrenderer/-/archive/%{version}/%{name}-%{version}.tar.gz
 
+Patch1:  1-bugfix-for-CVE-2019-18388.patch
 BuildRequires:  meson
 BuildRequires:	xorg-x11-util-macros
 BuildRequires:	libepoxy-devel
@@ -44,6 +45,7 @@ driver to test virgl rendering without GL.
 
 %prep
 %setup -q -n %{name}-%{version}
+%patch -P 1 -p1
 %build
 %meson -Dvideo=true
 %meson_build
@@ -71,5 +73,8 @@ driver to test virgl rendering without GL.
 %{_bindir}/virgl_test_server
 
 %changelog
+* Fri Jul 25 2025 tomcruiseqi <tomcruiseqi@inspur.com> - 0.10.4-2
+- Fix CVE-2019-18388
+
 * Wed Apr 5 2023 Ziyang Zhang <ZiyangZhang@linux.alibaba.com> - 0.10.4-1
 - Init package from upstream v0.10.4
\ No newline at end of file