diff --git a/apache-storm-1.2.3.tar.gzac b/apache-storm-1.2.3.tar.gzac
deleted file mode 100644
index 7e25461bf22b32c8e3861ef9fdfc913a46564186..0000000000000000000000000000000000000000
Binary files a/apache-storm-1.2.3.tar.gzac and /dev/null differ
diff --git a/apache-storm-1.2.3.tar.gz b/apache-storm-1.2.4.tar.gz
similarity index 100%
rename from apache-storm-1.2.3.tar.gz
rename to apache-storm-1.2.4.tar.gz
diff --git a/apache-storm-1.2.3.tar.gzaa b/apache-storm-1.2.4.tar.gzaa
similarity index 84%
rename from apache-storm-1.2.3.tar.gzaa
rename to apache-storm-1.2.4.tar.gzaa
index 9b27dfd5f6d91e581699b7c015a4b21910ea55db..704be92c8ede1066490c83086231b86583d233d0 100644
Binary files a/apache-storm-1.2.3.tar.gzaa and b/apache-storm-1.2.4.tar.gzaa differ
diff --git a/apache-storm-1.2.3.tar.gzab b/apache-storm-1.2.4.tar.gzab
similarity index 84%
rename from apache-storm-1.2.3.tar.gzab
rename to apache-storm-1.2.4.tar.gzab
index 3a4cbdec9d22819d717cf0886a49faf04fc5864f..d0d9a64bbf3f7b6168c3c4946bbdb433f1678ef0 100644
Binary files a/apache-storm-1.2.3.tar.gzab and b/apache-storm-1.2.4.tar.gzab differ
diff --git a/apache-storm-1.2.4.tar.gzac b/apache-storm-1.2.4.tar.gzac
new file mode 100644
index 0000000000000000000000000000000000000000..71480e1ea27f309aab5405313415aa9b3e2aefdf
Binary files /dev/null and b/apache-storm-1.2.4.tar.gzac differ
diff --git a/storm.spec b/storm.spec
index 59d4b61cb1f03e64f24ceba5899046d5dcdbc1db..970e9269d7b914c10a93de9505bd30e17612ab8f 100644
--- a/storm.spec
+++ b/storm.spec
@@ -4,8 +4,8 @@
 %define _log_dir %{_var}/log/storm
 %define _data_dir %{_sharedstatedir}/storm
 Name:           storm
-Version:        1.2.3
-Release:        3
+Version:        1.2.4
+Release:        1
 Summary:        Apache Storm realtime computation system
 License:        Apache-2.0
 Url:            http://storm.apache.org
@@ -16,9 +16,9 @@ Source3:        %{name}-logviewer.service
 Source4:        %{name}-ui.service
 Source5:        %{name}.logrotate
 Source6:        %{name}.conf
-Source7:        apache-storm-1.2.3.tar.gzaa
-Source8:        apache-storm-1.2.3.tar.gzab
-Source9:        apache-storm-1.2.3.tar.gzac
+Source7:        apache-storm-1.2.4.tar.gzaa
+Source8:        apache-storm-1.2.4.tar.gzab
+Source9:        apache-storm-1.2.4.tar.gzac
 BuildRoot:      %{_tmppath}/%{name}-%{version}-build
 %{?systemd_requires}
 BuildRequires:  systemd
@@ -88,6 +88,9 @@ done
 %dir %{_data_dir}
 
 %changelog
+* Tue Nov 2 2021 wangkai <wangkai385@huawei.com> 1.2.4 - 1
+- Upgrade to 1.2.4 for fix CVE-2021-38294,CVE-2021-40865
+
 * Mon Jun 14 2021 lingsheng <lingsheng@huawei.com> 1.2.3 - 3
 - Fix status failure after stopping service