--- rpms/e-smith-apache/sme9/e-smith-apache.spec	2014/07/29 15:27:18	1.10
+++ rpms/e-smith-apache/sme9/e-smith-apache.spec	2014/10/24 10:40:50	1.11
@@ -1,10 +1,10 @@
-# $Id: e-smith-apache.spec,v 1.9 2014/07/29 15:26:32 vip-ire Exp $
+# $Id: e-smith-apache.spec,v 1.10 2014/07/29 15:27:18 vip-ire Exp $
 
 Summary: e-smith server and gateway - apache module
 %define name e-smith-apache
 Name: %{name}
 %define version 2.4.0
-%define release 9
+%define release 10
 Version: %{version}
 Release: %{release}%{?dist}
 License: GPL
@@ -15,6 +15,7 @@ Patch2: e-smith-apache-2.4.0-ibay_auth.p
 Patch3: e-smith-apache-2.4.0-apache_modules.patch
 Patch4: e-smith-apache-2.4.0-35SSL10SSLCipherSuite.patch
 Patch5: e-smith-apache-2.4.0-ssl_engine_on.patch
+Patch6: e-smith-apache-2.4.0-mitigate_crime.patch
 BuildRoot: /var/tmp/%{name}-%{version}-%{release}-buildroot
 BuildArchitectures: noarch
 Requires: e-smith-base >= 4.15.1
@@ -34,6 +35,9 @@ BuildRequires: e-smith-devtools >= 1.11.
 e-smith server and gateway software - apache module.
 
 %changelog
+* Fri Oct 24 2014 Daniel Berteaud <daniel@firewall-services.com> 2.4.0-10.sme
+- Mitigate CVE-2012-4929 [SME: 8613]
+
 * Tue Jul 29 2014 Daniel Berteaud <daniel@firewall-services.com> 2.4.0-9.sme
 - Turn SSLEngine on in the SSL vhost (ProxyPassVirtualHosts) [SME: 8501]
 
@@ -586,6 +590,7 @@ e-smith server and gateway software - ap
 %patch3 -p1
 %patch4 -p1
 %patch5 -p1
+%patch6 -p1
 
 %build
 perl createlinks