diff --git a/gnucash.spec b/gnucash.spec
index 571c4ba..f28d972 100644
--- a/gnucash.spec
+++ b/gnucash.spec
@@ -4,7 +4,7 @@ Name: gnucash
 Summary: GnuCash is an application to keep track of your finances
 Version: 2.0.5
 URL: http://gnucash.org/
-Release: 3.1%{?dist}
+Release: 4%{?dist}
 License: GPLv2+
 Group: Applications/Productivity
 Source: http://www.gnucash.org/pub/gnucash/sources/stable/gnucash-%{version}.tar.bz2
@@ -84,6 +84,7 @@ rm -rf $RPM_BUILD_ROOT/%{_infodir} \
 	$RPM_BUILD_ROOT/%{_datadir}/gnome/apps \
 	$RPM_BUILD_ROOT/%{_libdir}/pkgconfig \
 	$RPM_BUILD_ROOT/%{_bindir}/gnucash-config
+	$RPM_BUILD_ROOT/%{_bindir}/gnc-test-env
 
 find $RPM_BUILD_ROOT/%{_libdir} -name *.so -a -type l -exec rm -f {} \;
 
@@ -129,6 +130,9 @@ fi
 %doc doc/README.german doc/README.francais doc/guile-hackers.txt
 
 %changelog
+* Thu Oct 21 2010 Bill Nottingham <notting@redhat.com>
+- don't ship gnc-test-env (#644933, CVE-2010-3999)
+
 * Tue Jun 12 2007 Bill Nottingham <notting@redhat.com> - 2.0.5-3.1
 - EPEL packaging tweaks