diff --git a/.cvsignore b/.cvsignore
index 70c6cdd..5165c48 100644
--- a/.cvsignore
+++ b/.cvsignore
@@ -1,2 +1,2 @@
-bind-9.7.1-P1.tar.gz
 config-7.tar.bz2
+bind-9.7.1-P2.tar.gz
diff --git a/bind.spec b/bind.spec
index f8ca12e..777f067 100644
--- a/bind.spec
+++ b/bind.spec
@@ -2,7 +2,7 @@
 # Red Hat BIND package .spec file
 #
 
-%define PATCHVER P1
+%define PATCHVER P2
 #%define PREVER rc1
 #%define VERSION %{version}%{PREVER}
 #%define VERSION %{version}
@@ -21,7 +21,7 @@ Summary:  The Berkeley Internet Name Domain (BIND) DNS (Domain Name System) serv
 Name:     bind
 License:  ISC
 Version:  9.7.1
-Release:  3.%{PATCHVER}%{?dist}
+Release:  4.%{PATCHVER}%{?dist}
 Epoch:    32
 Url:      http://www.isc.org/products/BIND/
 Buildroot:%{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
@@ -673,6 +673,9 @@ rm -rf ${RPM_BUILD_ROOT}
 %endif
 
 %changelog
+* Mon Jul 19 2010 Adam Tkac <atkac redhat com> 32:9.7.1-4.P2
+- update to 9.7.1-P2 (CVE-2010-0213)
+
 * Mon Jul 12 2010 Adam Tkac <atkac redhat com> 32:9.7.1-3.P1
 - remove outdated Copyright.caching-nameserver file
 - remove rfc1912.txt, it is already located in %%doc/rfc directory
diff --git a/sources b/sources
index 36252da..93b68e6 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
-d36f9be9707f8741c0c1c8036e7d05ad  bind-9.7.1-P1.tar.gz
 2c02006a58d9b9bb9e758816750b0014  config-7.tar.bz2
+bd6be63cc910d04da39103d441871596  bind-9.7.1-P2.tar.gz