diff --git a/.gitignore b/.gitignore
index cc6785d..ecdb3a0 100644
--- a/.gitignore
+++ b/.gitignore
@@ -16,3 +16,4 @@ bugzilla-3.6.1.tar.gz
 /bugzilla-4.2.4.tar.gz
 /bugzilla-4.2.5.tar.gz
 /bugzilla-4.2.6.tar.gz
+/bugzilla-4.2.7.tar.gz
diff --git a/bugzilla-rw-paths.patch b/bugzilla-rw-paths.patch
index 66b0d87..f2f342b 100644
--- a/bugzilla-rw-paths.patch
+++ b/bugzilla-rw-paths.patch
@@ -1,8 +1,12 @@
---- bugzilla-4.2/Bugzilla/Constants.pm	2012-02-26 22:39:30.161462858 +0100
-+++ bugzilla-4.2-rw/Bugzilla/Constants.pm	2012-02-26 22:41:55.185107179 +0100
-@@ -629,18 +629,18 @@
+diff -up ./Bugzilla/Constants.pm.orig ./Bugzilla/Constants.pm
+--- ./Bugzilla/Constants.pm.orig	2013-09-02 22:51:11.831245853 +0200
++++ ./Bugzilla/Constants.pm	2013-09-02 22:53:27.733416972 +0200
+@@ -627,20 +627,20 @@ sub bz_locations {
+         # make sure this still points to the CGIs.
+         'cgi_path'    => $libpath,
          'templatedir' => "$libpath/template",
-         'template_cache' => "$datadir/template",
+-        'template_cache' => "$datadir/template",
++        'template_cache' => "/var/lib/bugzilla/$datadir/template",
          'project'     => $project,
 -        'localconfig' => "$libpath/$localconfig",
 -        'datadir'     => $datadir,
diff --git a/bugzilla.spec b/bugzilla.spec
index 590a32f..8cd01dd 100644
--- a/bugzilla.spec
+++ b/bugzilla.spec
@@ -4,9 +4,9 @@
 Summary: Bug tracking system
 URL: http://www.bugzilla.org/
 Name: bugzilla
-Version: 4.2.6
+Version: 4.2.7
 Group: Applications/Publishing
-Release: 2%{?dist}
+Release: 1%{?dist}
 License: MPLv1.1
 Source0: http://ftp.mozilla.org/pub/mozilla.org/webtools/bugzilla-%{version}.tar.gz
 Source1: bugzilla-httpd-conf
@@ -216,6 +216,10 @@ popd > /dev/null)
 %{bzinstallprefix}/bugzilla/contrib/syncLDAP.pl
 
 %changelog
+* Thu Oct 17 2013 Emmanuel Seyman <emmanuel@seyman.fr> - 4.2.7-1
+- Update to 4.2.7 (security updates)
+- Patch bugzilla to write compiled templates under /var (#949130)
+
 * Sun Aug 04 2013 Emmanuel Seyman <emmanuel@seyman.fr> - 4.2.6-2
 - Change apache conf to enable access to all machines
 
diff --git a/sources b/sources
index 0e07eb9..ff6e8d0 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-65d0c7f1f281c37aa17a3ec5724251d6  bugzilla-4.2.6.tar.gz
+ebf0a75d1037f09994660d3958fc66fb  bugzilla-4.2.7.tar.gz