diff --git a/zlib.spec b/zlib.spec
index 3300b46..5ea9e35 100644
--- a/zlib.spec
+++ b/zlib.spec
@@ -1,11 +1,12 @@
 Summary: The zlib compression and decompression library.
 Name: zlib
 Version: 1.2.2.2
-Release: 4
+Release: 5
 Group: System Environment/Libraries
 Source: ftp://ftp.info-zip.org/pub/infozip/zlib/zlib-%{version}.tar.gz
 Patch0: zlib-1.1.4-make-test.patch
 Patch1: zlib-1.2.2.2-can-2005-2096.patch
+Patch2: zlib-1.2.2.2-can-2005-1849.patch
 URL: http://www.gzip.org/zlib/
 License: BSD
 Prefix: %{_prefix}
@@ -29,6 +30,7 @@ library.
 %setup -q
 %patch0 -p1 -b .make-test
 %patch1 -p1 -b .overfl
+%patch2 -p1 -b .overfl2
 
 %build
 CFLAGS="$RPM_OPT_FLAGS -fPIC" ./configure --shared --prefix=%{_prefix}
@@ -79,6 +81,9 @@ rm -rf ${RPM_BUILD_ROOT}
 %{_mandir}/man3/zlib.3*
 
 %changelog
+* Fri Jul 22 2005 Ivana Varekova <varekova@redhat.com> 1.2.2.2-5
+- fix bug 163038 - CAN-2005-1849 - zlib buffer overflow
+
 * Thu Jul 7  2005 Ivana Varekova <varekova@redhat.com> 1.2.2.2-4
 - fix bug 162392 - CAN-2005-2096