diff --git a/gnucash.spec b/gnucash.spec
index 89b8104..6b8fe9f 100644
--- a/gnucash.spec
+++ b/gnucash.spec
@@ -4,7 +4,7 @@ Name: gnucash
 Summary: Finance management application
 Version: 2.2.9
 URL: http://gnucash.org/
-Release: 4%{?dist}
+Release: 5%{?dist}
 License: GPLv2+
 Group: Applications/Productivity
 Source: http://www.gnucash.org/pub/gnucash/sources/stable/gnucash-%{version}.tar.lzma
@@ -81,6 +81,7 @@ rm -rf $RPM_BUILD_ROOT/%{_infodir} \
 	$RPM_BUILD_ROOT/%{_datadir}/gnome/apps \
 	$RPM_BUILD_ROOT/%{_libdir}/pkgconfig \
 	$RPM_BUILD_ROOT/%{_bindir}/gnucash-config
+	$RPM_BUILD_ROOT/%{_bindir}/gnc-test-env
 
 find $RPM_BUILD_ROOT/%{_libdir} -name *.la -exec rm -f {} \;
 
@@ -132,6 +133,9 @@ fi
 %doc doc/README.german doc/README.francais doc/guile-hackers.txt
 
 %changelog
+* Thu Oct 21 2010 Bill Nottingham <notting@redhat.com>
+- don't ship gnc-test-env (#644933, CVE-2010-3999)
+
 * Mon Jan 18 2010 Bill Nottingham <notting@redhat.com>
 - Fix crash on exporting account tree (#544454, #550362, #546597)