diff --git a/cyrus-sasl.spec b/cyrus-sasl.spec
index 4b95d33..c659b2c 100644
--- a/cyrus-sasl.spec
+++ b/cyrus-sasl.spec
@@ -11,7 +11,7 @@
 Summary: The Cyrus SASL library.
 Name: cyrus-sasl
 Version: 2.1.21
-Release: 2
+Release: 3
 License: Freely Distributable
 Group: System Environment/Libraries
 Source0: ftp://ftp.andrew.cmu.edu/pub/cyrus-mail/cyrus-sasl-%{version}.tar.gz
@@ -49,6 +49,7 @@ Patch14: cyrus-sasl-2.1.20-conflict.patch
 Patch15: cyrus-sasl-2.1.20-saslauthd.conf-path.patch
 Patch17: cyrus-sasl-2.1.21-builddir.patch
 Patch18: cyrus-sasl-2.1.21-linksrcs.patch
+Patch50: db-4.3.27-initmem.patch
 Buildroot: %{_tmppath}/%{name}-root
 %if %{includev1}
 BuildPrereq: gdbm-devel
@@ -133,6 +134,10 @@ using a RDBMS for storing shared secrets.
 %setup -q -c -a 6
 %endif
 
+pushd db-%{db_version}
+%patch50 -p2 -b .initmem
+popd
+
 %if %{includev1}
 pushd cyrus-sasl-%{cs1_version}
 %patch0 -p1 -b .rpath
@@ -550,6 +555,9 @@ fi
 #%{_sbindir}/saslauthd2-checkpass
 
 %changelog
+* Tue Aug 30 2005 Nalin Dahyabhai <nalin@redhat.com> 2.1.21-3
+- correct a use of uninitialized memory in the bundled libdb (Arjan van de Ven)
+
 * Mon Aug 29 2005 Nalin Dahyabhai <nalin@redhat.com> 2.1.21-2
 - move the ANONYMOUS mech plugin to the -lib subpackage so that multilib
   systems can use it without installing the main package