diff --git a/cairo.spec b/cairo.spec
index 7d5a359..6c9f731 100644
--- a/cairo.spec
+++ b/cairo.spec
@@ -4,7 +4,7 @@
 Summary:   A vector graphics library
 Name:      cairo
 Version:   1.0.2
-Release:   4.2
+Release:   5
 URL:       http://cairographics.org
 Source0:   %{name}-%{version}.tar.gz
 License:   LGPL/MPL
@@ -25,6 +25,7 @@ BuildRequires: fontconfig-devel >= %{fontconfig_version}
 
 Patch0: cairo-1.0.2-embedded-bitmaps.patch
 Patch1: cairo-1.0.2-fix-build.patch
+Patch2: cairo-1.0.2-chunk-glyphs-CVE-2006-0528.patch
 
 %description 
 Cairo is a vector graphics library designed to provide high-quality
@@ -53,6 +54,7 @@ source vector graphics library.
 %setup -q
 %patch0 -p1 -b .embedded-bitmaps
 %patch1 -p1 -b .fix-build
+%patch2 -p1 -b .chunk-glyphs-CVS-2006-0528
 
 %build
 %configure --enable-warnings --disable-glitz --disable-quartz \
@@ -87,6 +89,10 @@ rm -rf $RPM_BUILD_ROOT
 %{_datadir}/gtk-doc/*
 
 %changelog
+* Fri Mar  3 2006 Carl Worth <cworth@redhat.com> - 1.0.2-5
+- add patch to chunk Xlib glyph compositing (bug 182416 and
+  CVE-20060528)
+
 * Fri Feb 10 2006 Jesse Keating <jkeating@redhat.com> - 1.0.2-4.2
 - bump again for double-long bug on ppc(64)