diff --git a/sharutils.spec b/sharutils.spec
index e41b0ce..cd43315 100644
--- a/sharutils.spec
+++ b/sharutils.spec
@@ -1,7 +1,7 @@
 Summary: The GNU shar utilities for packaging and unpackaging shell archives.
 Name: sharutils
 Version: 4.2.1
-Release: 26
+Release: 27
 License: GPL
 Group: Applications/Archiving
 Source: ftp://prep.ai.mit.edu/pub/gnu/sharutils/sharutils-%{version}.tar.gz
@@ -15,6 +15,8 @@ Patch7: sharutils-4.2.1-uudecode.patch
 Patch8: sharutils-opto.dif
 Patch9: sharutils-4.2.1-sec.patch
 Patch10: sharutils-4.2.1-getcwd.patch
+Patch11: sharutils-4.2.1-CAN-2005-0990.patch
+
 BuildRequires: gettext
 Prereq: /sbin/install-info
 Buildroot: %{_tmppath}/%{name}-%{version}-%{release}-root
@@ -46,6 +48,7 @@ Install sharutils if you send binary files through e-mail.
 %patch8 -p0 -b .ooption
 %patch9 -p1
 %patch10 -p1 -b .getcwd
+%patch11 -p1 -b .CAN-2005-0990
 
 %build
 %configure
@@ -81,6 +84,10 @@ rm -rf ${RPM_BUILD_ROOT}
 %{_mandir}/*/*
 
 %changelog
+* Mon Apr 11 2005 Than Ngo <than@redhat.com> 4.2.1-27
+- apply debian patch to fix insecure temporary file creation
+  in unshar #154049, CAN-2005-0990
+
 * Thu Mar 31 2005 Than Ngo <than@redhat.com> 4.2.1-26
 - apply patch to fix multiple buffer overflows #152571