diff --git a/.gitignore b/.gitignore
index 9f08dd9..c3fc084 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1 +1,2 @@
 /libreswan-3.2.tar.gz
+/libreswan-3.3.tar.gz
diff --git a/libreswan.spec b/libreswan.spec
index 4c15274..0ac8d7c 100644
--- a/libreswan.spec
+++ b/libreswan.spec
@@ -16,7 +16,7 @@
 
 Name: libreswan
 Summary: IPsec implementation with IKEv1 and IKEv2 keying protocols
-Version: 3.2
+Version: 3.3
 Release: %{?prever:0.}1%{?prever:.%{prever}}%{?dist}
 License: GPLv2
 Url: https://www.libreswan.org/
@@ -62,11 +62,11 @@ BuildRequires: ElectricFence
 Requires: nss-tools, nss-softokn
 
 %description
-Libreswan is a free implementation of IPsec & IKE for Linux.  IPsec is 
+Libreswan is a free implementation of IPsec & IKE for Linux.  IPsec is
 the Internet Protocol Security and uses strong cryptography to provide
 both authentication and encryption services.  These services allow you
 to build secure tunnels through untrusted networks.  Everything passing
-through the untrusted net is encrypted by the ipsec gateway machine and 
+through the untrusted net is encrypted by the ipsec gateway machine and
 decrypted by the gateway at the other end of the tunnel.  The resulting
 tunnel is a virtual private network or VPN.
 
@@ -140,7 +140,7 @@ FS=$(pwd)
 rm -rf %{buildroot}/usr/share/doc/libreswan
 
 install -d -m 0755 %{buildroot}%{_localstatedir}/run/pluto
-# used when setting --perpeerlog without --perpeerlogbase 
+# used when setting --perpeerlog without --perpeerlogbase
 install -d -m 0700 %{buildroot}%{_localstatedir}/log/pluto/peer
 install -d %{buildroot}%{_sbindir}
 
@@ -151,7 +151,7 @@ mkdir -p %{buildroot}%{_libdir}/fipscheck
 echo "include /etc/ipsec.d/*.secrets" > %{buildroot}%{_sysconfdir}/ipsec.secrets
 rm -fr %{buildroot}/etc/rc.d/rc*
 
-%files 
+%files
 %doc BUGS CHANGES COPYING CREDITS README LICENSE
 %doc docs/*.*
 %attr(0644,root,root) %config(noreplace) %{_sysconfdir}/ipsec.conf
@@ -180,9 +180,12 @@ rm -fr %{buildroot}/etc/rc.d/rc*
 %postun
 %systemd_postun_with_restart ipsec.service
 
-%post 
+%post
 %systemd_post ipsec.service
 
 %changelog
+* Mon May 13 2013 Paul Wouters <pwouters@redhat.com> - 3.3-1
+- Updated to 3.3, which resolves CVE-2013-2052
+
 * Sat Apr 13 2013 Paul Wouters <pwouters@redhat.com> - 3.2-1
 - Initial package for Fedora
diff --git a/sources b/sources
index 7b608f6..a5e5c14 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-9917acaa9b389adf75588cbeba7279fd  libreswan-3.2.tar.gz
+a3e8562dfa1a7f4384e0e66a26acec52  libreswan-3.3.tar.gz