diff --git a/quota-3.13-wrong-ports.patch b/quota-3.13-wrong-ports.patch
new file mode 100644
index 0000000..8c59a28
--- /dev/null
+++ b/quota-3.13-wrong-ports.patch
@@ -0,0 +1,11 @@
+--- quota-tools/rquota_svc.c.orig	2005-06-01 03:21:30.000000000 -0400
++++ quota-tools/rquota_svc.c	2006-11-01 15:11:29.161101000 -0500
+@@ -140,7 +140,7 @@ static void parse_options(int argc, char
+ 				break;
+ 			case 'p': 
+ 				port = strtol(optarg, &endptr, 0);
+-				if (*endptr || port <= 0) {
++				if (*endptr || port <= 0 || port > 0xffff) {
+ 					errstr(_("Illegal port number: %s\n"), optarg);
+ 					show_help();
+ 					exit(1);
diff --git a/quota.spec b/quota.spec
index 5a8f84d..c45567e 100644
--- a/quota.spec
+++ b/quota.spec
@@ -15,6 +15,7 @@ Patch0:	quota-3.06-warnquota.patch
 Patch1: quota-3.06-no-stripping.patch
 Patch2: quota-3.06-man-page.patch
 Patch3: quota-3.06-pie.patch
+Patch4: quota-3.13-wrong-ports.patch
 
 
 %description
@@ -30,6 +31,7 @@ and limiting user and or group disk usage per filesystem.
 %ifnarch ppc ppc64
 %patch3 -p1
 %endif
+%patch4 -p1
 
 
 %build
@@ -78,6 +80,9 @@ rm -rf %{buildroot}
 
 
 %changelog
+* Wed Nov  1 2006 Steve Dickson <SteveD@RedHat.com> 1:3.13-1.2.3.2
+- Added range checking on -p flag (bz 205145)
+
 * Wed Jul 12 2006 Jesse Keating <jkeating@redhat.com> - 1:3.13-1.2.3.1
 - rebuild