diff --git a/.gitignore b/.gitignore
index 7af4a42..c1a4762 100644
--- a/.gitignore
+++ b/.gitignore
@@ -61,3 +61,4 @@ bind-9.7.2b1.tar.gz
 /bind-9.10.3.tar.gz
 /bind-9.10.3-P2.tar.gz
 /config-15.tar.bz2
+/bind-9.10.3-P3.tar.gz
diff --git a/bind.spec b/bind.spec
index c032508..b05df89 100644
--- a/bind.spec
+++ b/bind.spec
@@ -2,7 +2,7 @@
 # Red Hat BIND package .spec file
 #
 
-%global PATCHVER P2
+%global PATCHVER P3
 #%%global PREVER rc1
 %global VERSION %{version}%{?PREVER}%{?PATCHVER:-%{PATCHVER}}
 
@@ -25,7 +25,7 @@ Summary:  The Berkeley Internet Name Domain (BIND) DNS (Domain Name System) serv
 Name:     bind
 License:  ISC
 Version:  9.10.3
-Release:  9%{?PATCHVER:.%{PATCHVER}}%{?PREVER:.%{PREVER}}%{?dist}
+Release:  10%{?PATCHVER:.%{PATCHVER}}%{?PREVER:.%{PREVER}}%{?dist}
 Epoch:    32
 Url:      http://www.isc.org/products/BIND/
 Buildroot:%{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
@@ -1001,6 +1001,9 @@ rm -rf ${RPM_BUILD_ROOT}
 
 
 %changelog
+* Thu Jan 21 2016 Tomas Hozza <thozza@redhat.com> - 32:9.10.3-10.P3
+- Update to 9.10.3-P3 due to CVE-2015-8704 and CVE-2015-8705 (#1300051)
+
 * Wed Jan 06 2016 Tomas Hozza <thozza@redhat.com> - 32:9.10.3-9.P2
 - Commented out bindkeys-file statement in default configuration (#1223365#c3)
 - Removed unrecognized configure option --enable-developer
diff --git a/sources b/sources
index 600396d..ba85096 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
+bcf7e772b616f7259420a3edc5df350a  bind-9.10.3-P3.tar.gz
 c47ee477f29baac49dc59ef4fb732b97  config-15.tar.bz2
-672dd3c2796b12ac8440f55bcaecfa82  bind-9.10.3-P2.tar.gz