From 925d651ace887494efc27eed987dc0c1796a3244 Mon Sep 17 00:00:00 2001
From: Ales Ledvinka <aledvink@redhat.com>
Date: May 31 2012 23:27:36 +0000
Subject: 2.1a15-18


---

diff --git a/arpwatch.spec b/arpwatch.spec
index 1704382..5a693bb 100644
--- a/arpwatch.spec
+++ b/arpwatch.spec
@@ -3,7 +3,7 @@
 Name: arpwatch
 Epoch: 14
 Version: 2.1a15
-Release: 17%{?dist}
+Release: 18%{?dist}
 Summary: Network monitoring tools for tracking IP addresses on a network
 Group: Applications/System
 License: BSD with advertising
@@ -34,6 +34,7 @@ Patch8: arpwatch-2.1a15-nolocalpcap.patch
 Patch9: arpwatch-2.1a15-bogon.patch
 Patch10: arpwatch-2.1a15-extraman.patch
 Patch11: arpwatch-exitcode.patch
+Patch12: arpwatch-2.1a15-dropgroup.patch
 
 %description
 The arpwatch package contains arpwatch and arpsnmp.  Arpwatch and
@@ -59,6 +60,7 @@ network.
 %patch9 -p1 -b .bogon
 %patch10 -p1 -b .extraman
 %patch11 -p1 -b .exitcode
+%patch12 -p1 -b .dropgroup
 
 %build
 %configure
@@ -151,6 +153,9 @@ fi
 %verify(not md5 size mtime) %config(noreplace) %{_vararpwatch}/ethercodes.dat
 
 %changelog
+* Thu May 31 2012 Aleš Ledvinka <aledvink@redhat.com> 14:2.1a15-18
+- fix supplementary group list (#825328) (CVE-2012-2653)
+
 * Fri Jul 08 2011 Miroslav Lichvar <mlichvar@redhat.com> 14:2.1a15-17
 - exit with zero error code (#699285)
 - change service type to forking (#699285)