diff --git a/.oebuild/manifest.yaml b/.oebuild/manifest.yaml
index 984c9d0ce0356b57fde53743e045914377a8ef06..6b0018d31bf0a255ff20b411843017cc95249842 100644
--- a/.oebuild/manifest.yaml
+++ b/.oebuild/manifest.yaml
@@ -1766,7 +1766,7 @@ manifest_list:
     version: 297fdfe6f5060f5a466236e2749ac8a8dd40aca0
   tinyxml:
     remote_url: https://gitee.com/src-openeuler/tinyxml.git
-    version: 5b0746bade11738bd00d51632199d5360f8162a7
+    version: 7a73e8d94d5d60229982eb5121874ea9bedb05ab
   tinyxml-vendor:
     remote_url: https://gitee.com/src-openeuler/tinyxml_vendor.git
     version: da15b9fe3cb4eeb4027222341d5aa09ac923020d
diff --git a/meta-openeuler/dynamic-layers/openembedded-layer/recipes-support/libtinyxml/libtinyxml_%.bbappend b/meta-openeuler/dynamic-layers/openembedded-layer/recipes-support/libtinyxml/libtinyxml_%.bbappend
index f82c806c761eb39b42df5052c5eaf2a1c3664231..936f30e70b002b8ccec90d108ff57949c303e349 100644
--- a/meta-openeuler/dynamic-layers/openembedded-layer/recipes-support/libtinyxml/libtinyxml_%.bbappend
+++ b/meta-openeuler/dynamic-layers/openembedded-layer/recipes-support/libtinyxml/libtinyxml_%.bbappend
@@ -7,7 +7,9 @@ OPENEULER_LOCAL_NAME = "tinyxml"
 
 S = "${WORKDIR}/tinyxml"
 
+FILESEXTRAPATHS:prepend := "${THISDIR}/files/:"
+
 SRC_URI += "file://tinyxml_2_6_2.tar.gz \
         file://CVE-2021-42260.patch \
-        file://2-fix-devel-package-error.patch \
+        file://CVE-2023-34194.patch \
         "
diff --git a/meta-openeuler/dynamic-layers/openembedded-layer/recipes-support/libusb/files/0001-usb.h-Include-sys-types.h-1.patch b/meta-openeuler/dynamic-layers/openembedded-layer/recipes-support/libusb/files/0001-usb.h-Include-sys-types.h-1.patch
new file mode 100644
index 0000000000000000000000000000000000000000..51ae89f82f3904a2e09bce68a33587a48543a35f
--- /dev/null
+++ b/meta-openeuler/dynamic-layers/openembedded-layer/recipes-support/libusb/files/0001-usb.h-Include-sys-types.h-1.patch
@@ -0,0 +1,25 @@
+From 374555aa3d6ae4c8f054814f1f8088a98f83ec85 Mon Sep 17 00:00:00 2001
+From: alichinese <lixinyu44@huawei.com>
+Date: Mon, 27 Oct 2025 16:35:41 +0800
+Subject: [PATCH] usb.h-Include-sys-types.h
+
+---
+ libusb/usb.h | 2 ++
+ 1 file changed, 2 insertions(+)
+
+diff --git a/libusb/usb.h b/libusb/usb.h
+index ea62543..4f1752d 100644
+--- a/libusb/usb.h
++++ b/libusb/usb.h
+@@ -51,6 +51,8 @@ typedef unsigned __int32  uint32_t;
+ #include <linux/limits.h>
+ #endif
+ 
++#include <sys/types.h>
++
+ /*
+  * USB spec information
+  *
+-- 
+2.34.1
+
diff --git a/meta-openeuler/dynamic-layers/openembedded-layer/recipes-support/libusb/libusb-compat_%.bbappend b/meta-openeuler/dynamic-layers/openembedded-layer/recipes-support/libusb/libusb-compat_%.bbappend
index f6dc99fb47877a42c31e59be9f1bec27dcb8da24..1df080ff3943ff4ee83db01bc7c8065042e6c207 100644
--- a/meta-openeuler/dynamic-layers/openembedded-layer/recipes-support/libusb/libusb-compat_%.bbappend
+++ b/meta-openeuler/dynamic-layers/openembedded-layer/recipes-support/libusb/libusb-compat_%.bbappend
@@ -1,10 +1,14 @@
 OPENEULER_LOCAL_NAME = "libusb"
 PV = "0.1.8"
 
+FILESEXTRAPATHS:prepend := "${THISDIR}/files/:"
 SRC_URI:prepend = "file://${BP}.tar.bz2 \
            file://0000-Link-with-znodelete-to-disallow-unloading.patch \
+           file://0001-usb.h-Include-sys-types.h-1.patch \
 "
 
+SRC_URI:remove = "file://0001-usb.h-Include-sys-types.h.patch"
+
 SRC_URI[sha256sum] = "404ef4b6b324be79ac1bfb3d839eac860fbc929e6acb1ef88793a6ea328bc55a"
 
 S = "${WORKDIR}/${BP}"
diff --git a/meta-openeuler/dynamic-layers/ros2-layer/recipes-bbappends/yaml-cpp-vendor/yaml-cpp-vendor_%.bbappend b/meta-openeuler/dynamic-layers/ros2-layer/recipes-bbappends/yaml-cpp-vendor/yaml-cpp-vendor_%.bbappend
new file mode 100644
index 0000000000000000000000000000000000000000..7c5b73e4bf45b9ebbdd14c72c0d7ccdd567645f0
--- /dev/null
+++ b/meta-openeuler/dynamic-layers/ros2-layer/recipes-bbappends/yaml-cpp-vendor/yaml-cpp-vendor_%.bbappend
@@ -0,0 +1,3 @@
+# remove patch because the patch will create CMakeLists.txt, however,
+# the source code already has CMakeLists.txt, so we need to remove the patch
+SRC_URI:remove = "file://0001-Use-platform-yaml-cpp.patch"