Handling 3rd party sources

[Gianluca Sforna]

Hi,
I am tracking a third party project in my CVS server and, when they
make new releases, I am able to import and use the new sources.
Now, they fixed a bug I am hitting but a new version is not released
yet so my question is:
what is the best/preferred/safest way to handle this situation?
I am worried by the fact that, if I apply the patch and commit the
canges in HEAD, future imports will have to be merged manually (at
least for the files affected by this patch).

Thanks in advance

Gianluca