diff --git a/yp-tools.spec b/yp-tools.spec
index 2c5ce60..16cc62f 100644
--- a/yp-tools.spec
+++ b/yp-tools.spec
@@ -1,12 +1,13 @@
 Summary: NIS (or YP) client programs.
 Name: yp-tools
 Version: 2.7
-Release: 2
+Release: 3
 License: GPL
 Group: System Environment/Base
 Source: ftp://ftp.kernel.org/pub/linux/utils/net/NIS/yp-tools-%{version}.tar.bz2
 Url: http://www-vt.uni-paderborn.de/~kukuk/linux/nis.html
 Patch1: yp-tools-2.7-md5.patch
+Patch2: yp-tools-2.7-terminate.patch
 Obsoletes: yppasswd, yp-clients
 Requires: ypbind
 Buildroot: %{_tmppath}/%{name}-%{version}-root
@@ -33,7 +34,8 @@ you'll need to install the ypserv package on one machine on the network.
 
 %prep
 %setup -q
-%patch1 -p1
+%patch1 -p1 -b .md5
+%patch2 -p1 -b .terminate
 
 %build
 %configure --disable-domainname
@@ -59,6 +61,10 @@ rm -rf $RPM_BUILD_ROOT
 %dir /var/yp
 
 %changelog
+* Wed Aug 28 2002 Nalin Dahyabhai <nalin@redhat.com> 2.7-3
+- properly terminate an alloca'ed string in yppasswd which would lead to
+  improper rejection of the request if the user's pw_passwd was visible
+
 * Fri Jun 21 2002 Tim Powers <timp@redhat.com>
 - automated rebuild