diff --git a/kdegraphics.spec b/kdegraphics.spec
index 1191473..c23fd76 100644
--- a/kdegraphics.spec
+++ b/kdegraphics.spec
@@ -10,7 +10,7 @@
 %define no_scanner_archs s390 s390x
 
 Version: 3.3.2
-Release: 0.1
+Release: 0.2
 Name: kdegraphics
 Summary: K Desktop Environment - Graphics Applications
 Epoch: 7
@@ -24,6 +24,9 @@ Patch0: kde-libtool.patch
 Patch1: kdegraphics-3.3.0-misc.patch
 Patch3: kdegraphics-3.3.1-xorg.patch
 
+# security fix
+Patch4: post-3.3.2-kdegraphics.diff
+
 %ifnarch %{no_scanner_archs}
 BuildRequires: sane-backends-devel >= 1.0.3-10
 BuildRequires: gphoto2-devel
@@ -258,6 +261,9 @@ This package contains a model editor for the PovRay raytracer.
 %patch1 -p1 -b .misc
 %patch3 -p1 -b .xorg
 
+#security fix
+%patch4 -p0 -b .xpdf
+
 %if %{rhel}
 echo "DO_NOT_COMPILE=\"\$DO_NOT_COMPILE kfax\"" >kfax/configure.in.in
 echo "DO_NOT_COMPILE=\"\$DO_NOT_COMPILE kfaxview\"" >kfaxview/configure.in.in
@@ -343,6 +349,9 @@ rm -rf $RPM_BUILD_ROOT
 %{_includedir}/kde/*
 
 %changelog
+* Thu Dec 23 2004 Than Ngo <than@redhat.com> 7:3.3.2-0.2
+- Applied patch to fix CAN-2004-112
+
 * Fri Dec 03 2004 Than Ngo <than@redhat.com> 7:3.3.2-0.1
 - update to 3.3.2
 - remove kdegraphics-3.3.1-tiff.patch, it's included in 3.3.2