diff --git a/apr-util.spec b/apr-util.spec
index 296d34b..10fee49 100644
--- a/apr-util.spec
+++ b/apr-util.spec
@@ -4,7 +4,7 @@
 Summary: Apache Portable Runtime Utility library
 Name: apr-util
 Version: 0.9.4
-Release: 16
+Release: 17
 License: Apache Software License
 Group: System Environment/Libraries
 URL: http://apr.apache.org/
@@ -17,6 +17,7 @@ Patch4: apr-util-0.9.4-sdbm.patch
 Patch5: apr-util-0.9.4-sdbmnames.patch
 Patch6: apr-util-0.9.4-xlate.patch
 Patch7: apr-util-0.9.4-shapass.patch
+Patch8: apr-util-0.9.4-CAN-2004-0786.patch
 BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-buildroot
 BuildPrereq: autoconf, libtool, doxygen, apr-devel >= 0:0.9.4-1
 BuildPrereq: openldap-devel, db4-devel, expat-devel
@@ -51,6 +52,7 @@ library of C data structures and routines.
 %patch5 -p1 -b .sdbmnames
 %patch6 -p1 -b .xlate
 %patch7 -p1 -b .shapass
+%patch8 -p1 -b .can0786
 
 %build
 autoheader && autoconf
@@ -98,6 +100,9 @@ rm -rf $RPM_BUILD_ROOT
 %doc --parents html
 
 %changelog
+* Fri Sep 17 2004 Joe Orton <jorton@redhat.com> 0.9.4-17
+- add security fix for CAN-2004-0786
+
 * Sat Jun 19 2004 Joe Orton <jorton@redhat.com> 0.9.4-16
 - have -devel require matching release of apr-util