diff --git a/squid.spec b/squid.spec
index 47110d0..24516ed 100644
--- a/squid.spec
+++ b/squid.spec
@@ -1,8 +1,8 @@
 Summary: The Squid proxy caching server.
 Name: squid
 Version: 2.5.STABLE1
-Release: 2
-Serial: 7
+Release: 3.9
+Epoch: 7
 License: GPL
 Group: System Environment/Daemons
 Source: http://www.squid-cache.org/Squid/v2/squid-%{version}.tar.gz
@@ -14,6 +14,8 @@ Patch1: squid-2.5-config.patch
 Patch2: squid-perlpath.patch
 Patch3: squid-location.patch
 Patch4: squid-2.5-build.patch
+Patch5: squid-2.5.STABLE4-00.patch
+Patch6: squid-2.5.STABLE4-urllogin_acl.patch
 
 # Official upstream patches
 Patch100: squid-2.5.STABLE1-ldap_group.patch
@@ -74,6 +76,8 @@ lookup program (dnsserver), a program for retrieving FTP data
 #%patch2 -p1 -b .perlpath
 %patch3 -p1 -b .location
 %patch4 -p1 -b .build
+%patch5 -p1 -b .00
+%patch6 -p1 -b .urllogin_acl
 
 %patch100 -p1
 %patch101 -p1
@@ -305,6 +309,11 @@ if [ "$1" -ge "1" ] ; then
 fi
 
 %changelog
+* Tue Mar 9 2004 Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE1-3.9
+- Backport patch for %00 vulnerability
+- Backport patch to support the new urllogin acl type so squid can
+  be configured to protect vulnerable Microsoft Internet Explorer users.
+
 * Wed Jan 22 2003 Tim Powers <timp@redhat.com>
 - rebuilt