diff --git a/libsndfile.spec b/libsndfile.spec
index 2dde7d4..f2a8ee6 100644
--- a/libsndfile.spec
+++ b/libsndfile.spec
@@ -1,11 +1,13 @@
 Summary:	Library for reading and writing sound files
 Name:		libsndfile
 Version:	1.0.17
-Release:	1%{?dist}
+Release:	2%{?dist}
 License:	LGPL
 Group:		System Environment/Libraries
 URL:		http://www.mega-nerd.com/libsndfile/
 Source0:	http://www.mega-nerd.com/libsndfile/libsndfile-%{version}.tar.gz
+Patch0:         libsndfile-1.0.17+flac-1.1.3.patch.bz2
+Patch1:         libsndfile-1.0.17-flac-buffer-overflow.patch
 BuildRoot:	%{_tmppath}/%{name}-%{version}-%{release}-buildroot-%(%{__id_u} -n)
 
 BuildRequires:	alsa-lib-devel
@@ -31,6 +33,8 @@ This package contains files needed to develop with libsndfile.
 
 %prep
 %setup -q
+%patch0 -p1
+%patch1 -p1
 
 %build
 %configure --disable-dependency-tracking
@@ -78,6 +82,10 @@ rm -rf $RPM_BUILD_ROOT
 
 
 %changelog
+* Thu Sep 20 2007 Andreas Thienemann <andreas@bawue.net> - 1.0.17-2
+- Adding FLAC support to libsndfile courtesy of gentoo, #237575
+- Fixing CVE-2007-4974. Thanks to the gentoo people for the patch, #296221
+
 * Fri Sep 08 2006 Andreas Thienemann <andreas@bawue.net> - 1.0.17-1
 - Updated to 1.0.17