diff --git a/apache-storm-1.2.3.tar.gzac b/apache-storm-1.2.3.tar.gzac
deleted file mode 100644
index 7e25461..0000000
Binary files a/apache-storm-1.2.3.tar.gzac and /dev/null differ
diff --git a/apache-storm-1.2.3.tar.gz b/apache-storm-1.2.4.tar.gz
similarity index 100%
rename from apache-storm-1.2.3.tar.gz
rename to apache-storm-1.2.4.tar.gz
diff --git a/apache-storm-1.2.3.tar.gzaa b/apache-storm-1.2.4.tar.gzaa
similarity index 84%
rename from apache-storm-1.2.3.tar.gzaa
rename to apache-storm-1.2.4.tar.gzaa
index 9b27dfd..704be92 100644
Binary files a/apache-storm-1.2.3.tar.gzaa and b/apache-storm-1.2.4.tar.gzaa differ
diff --git a/apache-storm-1.2.3.tar.gzab b/apache-storm-1.2.4.tar.gzab
similarity index 84%
rename from apache-storm-1.2.3.tar.gzab
rename to apache-storm-1.2.4.tar.gzab
index 3a4cbde..d0d9a64 100644
Binary files a/apache-storm-1.2.3.tar.gzab and b/apache-storm-1.2.4.tar.gzab differ
diff --git a/apache-storm-1.2.4.tar.gzac b/apache-storm-1.2.4.tar.gzac
new file mode 100644
index 0000000..71480e1
Binary files /dev/null and b/apache-storm-1.2.4.tar.gzac differ
diff --git a/storm.spec b/storm.spec
index 1639b8d..925ea8c 100644
--- a/storm.spec
+++ b/storm.spec
@@ -4,8 +4,8 @@
 %define _log_dir %{_var}/log/storm
 %define _data_dir %{_sharedstatedir}/storm
 Name:           storm
-Version:        1.2.3
-Release:        4
+Version:        1.2.4
+Release:        1
 Summary:        Apache Storm realtime computation system
 License:        Apache-2.0
 Url:            http://storm.apache.org
@@ -16,9 +16,9 @@ Source3:        %{name}-logviewer.service
 Source4:        %{name}-ui.service
 Source5:        %{name}.logrotate
 Source6:        %{name}.conf
-Source7:        apache-storm-1.2.3.tar.gzaa
-Source8:        apache-storm-1.2.3.tar.gzab
-Source9:        apache-storm-1.2.3.tar.gzac
+Source7:        apache-storm-1.2.4.tar.gzaa
+Source8:        apache-storm-1.2.4.tar.gzab
+Source9:        apache-storm-1.2.4.tar.gzac
 BuildRoot:      %{_tmppath}/%{name}-%{version}-build
 %{?systemd_requires}
 BuildRequires:  systemd
@@ -88,6 +88,9 @@ done
 %dir %{_data_dir}
 
 %changelog
+* Mon 1 Sep 2021 wangkai <wangkai385@huawei.com> 1.2.4 - 1
+- Upgrade to 1.2.4 for fix CVE-2021-38294-CVE-2021-40865
+
 * Fri 20 Aug 2021 sunguoshuai <sunguoshuai@huawei.com> 1.2.3 - 4
 - Fix runtime error and uninstall warning