diff --git a/0002-fix-CVE-2024-42934.patch b/0002-fix-CVE-2024-42934.patch
new file mode 100644
index 0000000000000000000000000000000000000000..51b8786bfe79c14706312f5a7579d9287f522713
--- /dev/null
+++ b/0002-fix-CVE-2024-42934.patch
@@ -0,0 +1,42 @@
+From b52e8e2538b2b48ef6b63bff12b5cc9e2d52eff1 Mon Sep 17 00:00:00 2001
+From: Corey Minyard <minyard@...>
+Date: Wed, 9 Oct 2024 01:36:52 +0800
+Subject: [PATCH] fix-CVE-2024-42934
+
+lanserv: Check some bounds on incoming messages
+
+---
+ lanserv/lanserv_ipmi.c | 10 ++++++++++
+ 1 file changed, 10 insertions(+)
+
+diff --git a/lanserv/lanserv_ipmi.c b/lanserv/lanserv_ipmi.c
+index 8cedb35..b8eb054 100644
+--- a/lanserv/lanserv_ipmi.c
++++ b/lanserv/lanserv_ipmi.c
+@@ -881,6 +881,11 @@ handle_temp_session(lanserv_data_t *lan, msg_t *msg)
+     }
+ 
+     auth = msg->data[0] & 0xf;
++    if (auth >= MAX_IPMI_AUTHS) {
++    lan->sysinfo->log(lan->sysinfo, NEW_SESSION_FAILED, msg,
++         "Activate session failed: Invalid auth: 0x%x", auth);
++    return;	
++    }
+     user = &(lan->users[user_idx]);
+     if (! (user->valid)) {
+ 	lan->sysinfo->log(lan->sysinfo, NEW_SESSION_FAILED, msg,
+@@ -3034,6 +3039,11 @@ ipmi_handle_lan_msg(lanserv_data_t *lan,
+     }
+ 
+     msg.authtype = data[4];
++    if (msg.authtype >= MAX_IPMI_AUTHS) {
++    lan->sysinfo->log(lan->sysinfo, LAN_ERR, &msg,
++         "LAN msg failure: Invalid authtype");
++    return;	
++    }
+     msg.data = data+5;
+     msg.len = len - 5;
+     msg.channel = lan->channel.channel_num;
+-- 
+2.43.0
+
diff --git a/OpenIPMI.spec b/OpenIPMI.spec
index 79a6e2afe18a18c47f3d38edadb91dc2b8e530f7..5b71b6b9cd20efd2bbf6901fa103d3145c0c1179 100644
--- a/OpenIPMI.spec
+++ b/OpenIPMI.spec
@@ -1,6 +1,6 @@
 Name:       OpenIPMI
 Version:    2.0.29
-Release:    2
+Release:    3
 Summary:    IPMI (Intelligent Platform Management Interface) library and tools
 License:    LGPLv2+ and GPLv2+ or BSD
 URL:        https://sourceforge.net/projects/openipmi/
@@ -11,6 +11,7 @@ Source3:    openipmi-helper
 
 Patch6000:     0001-man.patch
 Patch6001:     backport-fix-coredump-when-use-ipmi_ui.patch
+Patch6002:     0002-fix-CVE-2024-42934.patch
 
 BuildRequires:    gdbm-devel swig glib2-devel net-snmp-devel ncurses-devel
 BuildRequires:    openssl-devel python3-devel perl-devel perl-generators
@@ -142,6 +143,12 @@ echo ".so man1/openipmish.1" > %{buildroot}%{_mandir}/man1/ipmish.1
 %exclude %{_mandir}/man1/openipmigui.1
 
 %changelog
+* Wed Oct 09 2024 changtao <changtao@kylinos.cn> - 2.0.29-3
+- Type:CVE
+- ID:CVE-2024-42934
+- SUG:NA
+- DESC: fix CVE-2024-42934
+
 * Sat Apr 01 2023 yanglu <yanglu72@h-partners.com> - 2.0.29-2
 - Type:bugfix
 - ID:NA