diff --git a/cups.spec b/cups.spec
index 2c6f355..cd4b7d1 100644
--- a/cups.spec
+++ b/cups.spec
@@ -56,7 +56,8 @@ Patch38: cups-str1290.patch
 Patch39: cups-str1301.patch
 Patch40: cups-link.patch
 Patch41: cups-relro.patch
-Patch42: cups-dbus.patch
+Patch42: cups-CVE-2005-3625,6,7.patch
+Patch43: cups-dbus.patch
 Epoch: 1
 Url: http://www.cups.org/
 BuildRoot: %{_tmppath}/%{name}-root
@@ -161,8 +162,9 @@ lpd emulation.
 %patch39 -p1 -b .str1301
 %patch40 -p1 -b .link
 %patch41 -p1 -b .relro
+%patch42 -p1 -b .CVE-2005-3625,6,7
 %if %use_dbus
-%patch42 -p1 -b .dbus
+%patch43 -p1 -b .dbus
 %endif
 perl -pi -e 's,^#(Printcap\s+/etc/printcap),$1,' conf/cupsd.conf.in
 aclocal -I config-scripts
@@ -427,6 +429,10 @@ rm -rf $RPM_BUILD_ROOT
 %{_libdir}/cups/daemon/cups-lpd
 
 %changelog
+* Wed Jan  4 2006 Tim Waugh <twaugh@redhat.com>
+- Apply patch to fix CVE-2005-3625, CVE-2005-3626, CVE-2005-3627
+  (bug #176868).
+
 * Mon Dec 19 2005 Tim Waugh <twaugh@redhat.com> 1:1.1.23-27
 - Link pdftops with -z relro.