diff --git a/.cvsignore b/.cvsignore
index e678f58..6a34202 100644
--- a/.cvsignore
+++ b/.cvsignore
@@ -1 +1 @@
-bugzilla-3.0.2.tar.gz
+bugzilla-3.0.4.tar.gz
diff --git a/bugzilla.spec b/bugzilla.spec
index cbd8a7e..41aa472 100644
--- a/bugzilla.spec
+++ b/bugzilla.spec
@@ -4,9 +4,9 @@
 Summary: Bug tracking system
 URL: http://www.bugzilla.org/
 Name: bugzilla
-Version: 3.0.2
+Version: 3.0.4
 Group: Applications/Publishing
-Release: 6%{?dist}
+Release: 1%{?dist}
 License: MPL
 Source0: http://ftp.mozilla.org/pub/mozilla.org/webtools/bugzilla-%{version}.tar.gz
 Source1: bugzilla-httpd-conf
@@ -124,6 +124,7 @@ popd > /dev/null
 %doc UPGRADING-pre-2.8
 %doc README.fedora
 %dir %{bzdatadir}
+%defattr(0750,root,apache,-)
 %dir %{_sysconfdir}/bugzilla
 
 %files doc
@@ -133,6 +134,10 @@ popd > /dev/null
 %{bzinstallprefix}/bugzilla/contrib
 
 %changelog
+* Fri May  9 2008 John Berninger <john at ncphotography dot com> - 3.0.4-1
+- Update to upstream 3.0.4 to fix multiple security vulns
+- Change perms on /etc/bugzilla for bz 427981 
+
 * Fri Dec 28 2007 John Berninger <john at ncphotography dot com> - 3.0.2-6
 - Add cron.daily, cron.whine to payload list
 
diff --git a/sources b/sources
index d4f2fda..e0ea8df 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-53afb2c5d4c105ed2f4b2ba4ccfcedc7  bugzilla-3.0.2.tar.gz
+f55a3f3cde9cf1bf56492d18c8f7afe4  bugzilla-3.0.4.tar.gz