diff --git a/.cvsignore b/.cvsignore
index 95c54cc..8798a8c 100644
--- a/.cvsignore
+++ b/.cvsignore
@@ -1 +1 @@
-IO-Socket-SSL-1.31.tar.gz
+IO-Socket-SSL-1.33.tar.gz
diff --git a/perl-IO-Socket-SSL.spec b/perl-IO-Socket-SSL.spec
index 1b2f8aa..7496c91 100644
--- a/perl-IO-Socket-SSL.spec
+++ b/perl-IO-Socket-SSL.spec
@@ -4,8 +4,8 @@
 #
 
 Name:		perl-IO-Socket-SSL
-Version:	1.31
-Release:	2%{?dist}
+Version:	1.33
+Release:	1%{?dist}
 Summary:	Perl library for transparent SSL
 Group:		Development/Libraries
 License:	GPL+ or Artistic
@@ -42,8 +42,8 @@ done
 %{__rm} -rf %{buildroot}
 %{__make} pure_install PERL_INSTALL_ROOT=%{buildroot}
 /usr/bin/find %{buildroot} -type f -name .packlist -exec %{__rm} -f {} ';'
-/usr/bin/find %{buildroot} -depth -type d -exec /bin/rmdir {} 2>/dev/null ';'
-%{__chmod} -R u+w %{buildroot}/*
+/usr/bin/find %{buildroot} -depth -type d -exec /bin/rmdir {} ';' 2>/dev/null
+%{_fixperms} %{buildroot}
 
 %check
 # Avoid running the session tests (spawns servers, requires 3 free ports
@@ -61,8 +61,17 @@ done
 %{_mandir}/man3/IO::Socket::SSL.3pm*
 
 %changelog
+* Wed Mar 17 2010 Paul Howarth <paul@city-fan.org> - 1.33-1
+- Update to 1.33
+  - attempt to make t/memleak_bad_handshake.t more stable
+  - fix hostname checking: only check an IP against subjectAltName GEN_IPADD
+
+* Tue Feb 23 2010 Paul Howarth <paul@city-fan.org> - 1.32-1
+- Update to 1.32 (die in Makefile.PL if Scalar::Util has no dualvar support)
+- Use %%{_fixperms} macro instead of our own %%{__chmod} incantation
+
 * Mon Dec  7 2009 Stepan Kasal <skasal@redhat.com> - 1.31-2
-- rebuild against perl 5.10.1
+- Rebuild against perl 5.10.1
 
 * Sun Sep 27 2009 Paul Howarth <paul@city-fan.org> - 1.31-1
 - Update to 1.31 (see Changes for details)
diff --git a/sources b/sources
index fbe409d..7b6a378 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-3a51c3f603ee242d5869e8ffd51b989b  IO-Socket-SSL-1.31.tar.gz
+e288b5cda3de1f4cbf15e2eb709e9d7c  IO-Socket-SSL-1.33.tar.gz