diff --git a/bind-9.5-CVE-2008-0122.patch b/bind-9.5-CVE-2008-0122.patch
new file mode 100644
index 0000000..38e0a4b
--- /dev/null
+++ b/bind-9.5-CVE-2008-0122.patch
@@ -0,0 +1,20 @@
+Index: lib/bind/inet/inet_network.c
+===================================================================
+RCS file: /var/snap/bind9/lib/bind/inet/inet_network.c,v
+retrieving revision 1.5
+retrieving revision 1.6
+diff -u -r1.5 -r1.6
+--- lib/bind/inet/inet_network.c	27 Apr 2005 04:56:21 -0000	1.5
++++ lib/bind/inet/inet_network.c	15 Jan 2008 04:02:01 -0000	1.6
+@@ -84,9 +84,9 @@
+ 	}
+ 	if (!digit)
+ 		return (INADDR_NONE);
++	if (pp >= parts + 4 || val > 0xffU)
++		return (INADDR_NONE);
+ 	if (*cp == '.') {
+-		if (pp >= parts + 4 || val > 0xffU)
+-			return (INADDR_NONE);
+ 		*pp++ = val, cp++;
+ 		goto again;
+ 	}
diff --git a/bind.spec b/bind.spec
index 0002e45..268e954 100644
--- a/bind.spec
+++ b/bind.spec
@@ -18,7 +18,7 @@ Summary: 	The Berkeley Internet Name Domain (BIND) DNS (Domain Name System) serv
 Name: 		bind
 License: 	BSD-like
 Version: 	9.4.2
-Release: 	2%{?dist}
+Release: 	3%{?dist}
 Epoch:   	31
 Url: 		http://www.isc.org/products/BIND/
 Buildroot:	%{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
@@ -69,6 +69,7 @@ Patch65:	bind-9.4.0-dig-idn.patch
 Patch66:	bind-9.4.0-zone-freeze.patch
 Patch68:	bind-9.4.1-ldap-api.patch
 Patch71:	bind-9.4-dbus.patch
+Patch72:	bind-9.5-CVE-2008-0122.patch
 #
 Requires:	bind-libs = %{epoch}:%{version}-%{release}, glibc  >= 2.2, mktemp
 Requires(post): grep, chkconfig >= 1.3.26
@@ -292,6 +293,7 @@ popd
 %patch65 -p1 -b .idn
 %endif
 %patch66 -p1 -b .freeze
+%patch72 -p0 -b .CVE-2008-0122
 :;
 
 
@@ -453,7 +455,7 @@ for f in my.internal.zone.db slaves/my.slave.internal.zone.db slaves/my.ddns.int
   echo '@ in soa localhost. root 1 3H 15M 1W 1D
   ns localhost.' >  sample/var/named/$f; 
 done
-/usr/bin/tail -n '+'`/bin/egrep -n '\\$Id: bind.spec,v 1.200 2007/12/19 17:11:16 atkac Exp $/+1/' | bc` bin/rndc/rndc.conf | sed '/Sample rndc configuration file./{p;i\
+/usr/bin/tail -n '+'`/bin/egrep -n '\\$Id: bind.spec,v 1.201 2008/01/21 10:17:28 atkac Exp $/+1/' | bc` bin/rndc/rndc.conf | sed '/Sample rndc configuration file./{p;i\
  *\
  * NOTE: you only need to create this file if it is to\
  * differ from the following default contents:
@@ -786,6 +788,9 @@ rm -rf ${RPM_BUILD_ROOT}
 
 
 %changelog
+* Mon Jan 21 2008 Adam Tkac <atkac redhat com> 31:9.4.2-3
+- CVE-2008-0122
+
 * Wed Dec 19 2007 Adam Tkac <atkac redhat com> 31:9.4.2-2
 - CVE-2007-6283