diff --git a/CVE-2021-27212.patch b/CVE-2021-27212.patch
new file mode 100644
index 0000000000000000000000000000000000000000..663cae6a964179807a29b5b21b3cf39acd457562
--- /dev/null
+++ b/CVE-2021-27212.patch
@@ -0,0 +1,28 @@
+From 3539fc33212b528c56b716584f2c2994af7c30b0 Mon Sep 17 00:00:00 2001
+From: Howard Chu <hyc@openldap.org>
+Date: Sat, 6 Feb 2021 20:52:06 +0000
+Subject: [PATCH] ITS#9454 fix issuerAndThisUpdateCheck
+
+Reference:https://git.openldap.org/openldap/openldap/-/commit/3539fc33212b528c56b716584f2c2994af7c30b0
+
+---
+ servers/slapd/schema_init.c | 2 ++
+ 1 file changed, 2 insertions(+)
+
+diff --git a/servers/slapd/schema_init.c b/servers/slapd/schema_init.c
+index 466899625..914df70eb 100644
+--- a/servers/slapd/schema_init.c
++++ b/servers/slapd/schema_init.c
+@@ -3975,6 +3975,8 @@ issuerAndThisUpdateCheck(
+ 					break;
+ 				}
+ 			}
++			if ( tu->bv_len < STRLENOF("YYYYmmddHHmmssZ") ) return LDAP_INVALID_SYNTAX;
++
+ 			x.bv_val += tu->bv_len + 1;
+ 			x.bv_len -= tu->bv_len + 1;
+ 
+
+-- 
+GitLab
+
diff --git a/openldap.spec b/openldap.spec
index 965a3dfa653ff3b24125466369f2abda58b2e589..ce55310336c36b90fd3f8abe6a63ec70b0c2ea50 100644
--- a/openldap.spec
+++ b/openldap.spec
@@ -2,7 +2,7 @@
 
 Name:           openldap
 Version:        2.4.50
-Release:        5
+Release:        6
 Summary:        LDAP support libraries
 License:        OpenLDAP
 URL:            https://www.openldap.org/
@@ -57,6 +57,7 @@ Patch36:	CVE-2020-36227.patch
 Patch37:	CVE-2020-36228.patch
 Patch38:	CVE-2020-36230.patch
 Patch39:	CVE-2020-36229.patch
+Patch40:	CVE-2021-27212.patch
 
 BuildRequires:  cyrus-sasl-devel openssl-devel krb5-devel unixODBC-devel
 BuildRequires:  glibc-devel libtool libtool-ltdl-devel groff perl-interpreter perl-devel perl-generators perl-ExtUtils-Embed
@@ -161,6 +162,7 @@ AUTOMAKE=%{_bindir}/true autoreconf -fi
 %patch37 -p1
 %patch38 -p1
 %patch39 -p1
+%patch40 -p1
 
 ln -s ../../../contrib/slapd-modules/smbk5pwd/smbk5pwd.c servers/slapd/overlays
 mv contrib/slapd-modules/smbk5pwd/README contrib/slapd-modules/smbk5pwd/README.smbk5pwd
@@ -443,6 +445,9 @@ popd
 %doc ltb-project-openldap-ppolicy-check-password-1.1/README.check_pwd
 
 %changelog
+* Sat Feb 27 2021 orange-snn <songnannan2@huawei.com> - 2.4.50-6
+- fix CVE-2021-27212
+
 * Thu Feb 18 2021 liulong <liulong20@huawei.com> - 2.4.50-5
 - Type:cves
 - ID:NA