diff --git a/dnsmasq.spec b/dnsmasq.spec
index d7b269a..bf0986c 100644
--- a/dnsmasq.spec
+++ b/dnsmasq.spec
@@ -22,6 +22,8 @@ URL:            http://www.thekelleys.org.uk/dnsmasq/
 Source0:        http://www.thekelleys.org.uk/dnsmasq/%{?extrapath}%{name}-%{version}%{?extraversion}.tar.xz
 Source1:        %{name}.service
 
+Patch1:         dnsmasq-2.77-CVE-2017-13704.patch
+
 BuildRoot:      %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
 
 BuildRequires:  dbus-devel
@@ -55,6 +57,7 @@ query/remove a DHCP server's leases.
 
 %prep
 %setup -q -n %{name}-%{version}%{?extraversion}
+%patch1 -p1 -b .CVE-2017-13704
 
 # use /var/lib/dnsmasq instead of /var/lib/misc
 for file in dnsmasq.conf.example man/dnsmasq.8 man/es/dnsmasq.8 src/config.h; do