diff --git a/php-pear-MDB2-2.4.1-lob.patch b/php-pear-MDB2-2.4.1-lob.patch
new file mode 100644
index 0000000..18e2c05
--- /dev/null
+++ b/php-pear-MDB2-2.4.1-lob.patch
@@ -0,0 +1,29 @@
+http://cvs.php.net/viewvc.cgi/pear/MDB2/MDB2.php?r1=1.292&r2=1.293&diff_format=u
+Index: pear/MDB2/MDB2.php
+diff -u pear/MDB2/MDB2.php:1.292 pear/MDB2/MDB2.php:1.293
+--- MDB2.php:1.292	Wed Apr 25 09:31:01 2007
++++ MDB2.php	Thu May  3 22:20:20 2007
+@@ -43,7 +43,7 @@
+ // | Author: Lukas Smith <smith@pooteeweet.org>                           |
+ // +----------------------------------------------------------------------+
+ //
+-// $Id: MDB2.php,v 1.292 2007/04/25 09:31:01 quipo Exp $
++// $Id: MDB2.php,v 1.293 2007/05/03 22:20:20 davidc Exp $
+ //
+ 
+ /**
+@@ -1156,6 +1156,7 @@
+         'datatype_map' => array(),
+         'datatype_map_callback' => array(),
+         'nativetype_map_callback' => array(),
++        'lob_allow_url_include' => false,
+     );
+ 
+     /**
+@@ -4268,4 +4269,4 @@
+ }
+ 
+ // }}}
+-?>
+\ No newline at end of file
++?>
diff --git a/php-pear-MDB2.spec b/php-pear-MDB2.spec
index 0428ac6..5f7844c 100644
--- a/php-pear-MDB2.spec
+++ b/php-pear-MDB2.spec
@@ -3,13 +3,14 @@
 
 Name:           php-pear-MDB2
 Version:        2.4.1
-Release:        1%{?dist}
+Release:        2%{?dist}
 Summary:        Database Abstraction Layer
 
 Group:          Development/Libraries
 License:        BSD
 URL:            http://pear.php.net/package/MDB2
 Source0:        http://pear.php.net/get/%{ClassName}-%{version}.tgz
+Patch0:         %{name}-2.4.1-lob.patch
 BuildRoot:      %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
 
 BuildArch:      noarch
@@ -57,6 +58,12 @@ rm -rf $RPM_BUILD_ROOT%{pear_phpdir}/.??*
 install -d $RPM_BUILD_ROOT%{pear_xmldir}
 install -pm 644 %{ClassName}.xml $RPM_BUILD_ROOT%{pear_xmldir}
 
+# Add LOB security patch (bz #379081)
+# Must be patched manually after install
+pushd $RPM_BUILD_ROOT%{pear_phpdir}
+patch -p0 < %{PATCH0}
+popd
+
 
 %clean
 rm -rf $RPM_BUILD_ROOT
@@ -83,6 +90,9 @@ fi
 
 
 %changelog
+* Tue Nov 13 2007 Christopher Stone <chris.stone@gmail.com> 2.4.1-2
+- Add LOB security patch (bz #379081)
+
 * Sat May 05 2007 Christopher Stone <chris.stone@gmail.com> 2.4.1-1
 - Upstream sync