diff --git a/authconfig.spec b/authconfig.spec
index 928ed06..022d752 100644
--- a/authconfig.spec
+++ b/authconfig.spec
@@ -3,7 +3,10 @@ Name: authconfig
 Version: 5.3.3
 # Don't change release in elvis CVS, up version after merging all patches
 # from dist CVS instead.
-Release: 1
+# rstrode: i'm bumping release here instead of doing elvis CVS
+# upstream release because we're freezing tomorrow and I don't
+# want to do an upstream release without patch review
+Release: 2
 License: GPL
 ExclusiveOS: Linux
 Group: System Environment/Base
@@ -15,6 +18,8 @@ Conflicts: pam_krb5 < 1.49, samba-common < 3.0, samba-client < 3.0
 BuildRequires: glib2-devel, python, python-devel
 BuildRequires: desktop-file-utils, intltool, gettext, perl-XML-Parser
 
+Patch0: authconfig-5.3.3-fixup-for-freeze.patch
+
 %description 
 Authconfig is a command line utility which can configure a workstation
 to use shadow (more secure) passwords.  Authconfig can also configure a
@@ -35,6 +40,7 @@ authentication schemes.
 
 %prep
 %setup -q -n %{name}-%{version}
+%patch0 -p1 -b .fixup-for-freeze
 
 %build
 CFLAGS="$RPM_OPT_FLAGS -fPIC"; export CFLAGS
@@ -95,6 +101,16 @@ rm -rf $RPM_BUILD_ROOT
 %{_datadir}/pixmaps/*
 
 %changelog
+* Sun Jul 23 2006 Ray Strode <rstrode@redhat.com> - 5.3.3-2
+- write out new "wait_for_card" config option if we're
+  forcing smart card authentication
+- add "use_uid" option to smart card pam_succeed_if line to
+  work around bug where pam_succeed_if checks user information
+  even in cases where the conditional doesn't depend on it.
+- remove unimplemented "logout" smart card removal action from
+  settings
+- remove unnecessary "card_only" argument
+
 * Fri Jul 21 2006 Tomas Mraz <tmraz@redhat.com> - 5.3.3-1
 - don't start sceventd when smartcard login is enabled
 - improve pam config for smartcard login