diff --git a/sharutils.spec b/sharutils.spec
index 3698f83..e41b0ce 100644
--- a/sharutils.spec
+++ b/sharutils.spec
@@ -1,7 +1,7 @@
 Summary: The GNU shar utilities for packaging and unpackaging shell archives.
 Name: sharutils
 Version: 4.2.1
-Release: 25
+Release: 26
 License: GPL
 Group: Applications/Archiving
 Source: ftp://prep.ai.mit.edu/pub/gnu/sharutils/sharutils-%{version}.tar.gz
@@ -13,7 +13,7 @@ Patch5: sharutils-4.2-uudecode.patch
 Patch6: sharutils-4.2.1-mktemp.patch
 Patch7: sharutils-4.2.1-uudecode.patch
 Patch8: sharutils-opto.dif
-Patch9: sharutils.patch
+Patch9: sharutils-4.2.1-sec.patch
 Patch10: sharutils-4.2.1-getcwd.patch
 BuildRequires: gettext
 Prereq: /sbin/install-info
@@ -44,7 +44,7 @@ Install sharutils if you send binary files through e-mail.
 %patch6 -p1
 %patch7 -p1
 %patch8 -p0 -b .ooption
-%patch9 -p0
+%patch9 -p1
 %patch10 -p1 -b .getcwd
 
 %build
@@ -81,6 +81,9 @@ rm -rf ${RPM_BUILD_ROOT}
 %{_mandir}/*/*
 
 %changelog
+* Thu Mar 31 2005 Than Ngo <than@redhat.com> 4.2.1-26
+- apply patch to fix multiple buffer overflows #152571
+
 * Mon Mar 07 2005 Than Ngo <than@redhat.com> 4.2.1-25
 - cleanup