diff --git a/.cvsignore b/.cvsignore
index a2507e2..bc4d89d 100644
--- a/.cvsignore
+++ b/.cvsignore
@@ -1,5 +1,5 @@
 config-4.tar.bz2
 libbind-man.tar.gz
 bind-chroot.tar.bz2
-bind-9.6.0.tar.gz
+bind-9.6.0-P1.tar.gz
 libbind-9.5.1b2.tar.bz2
diff --git a/bind.spec b/bind.spec
index 50c91c5..f913196 100644
--- a/bind.spec
+++ b/bind.spec
@@ -2,9 +2,11 @@
 # Red Hat BIND package .spec file
 #
 
+%define PATCHVER P1
 #%define PREVER rc2
 #%define VERSION %{version}%{PREVER}
-%define VERSION %{version}
+#%define VERSION %{version}
+%define VERSION %{version}-%{PATCHVER}
 
 %{?!SDB:       %define SDB       1}
 %{?!LIBBIND:   %define LIBBIND   1}
@@ -19,7 +21,7 @@ Summary:  The Berkeley Internet Name Domain (BIND) DNS (Domain Name System) serv
 Name:     bind
 License:  ISC
 Version:  9.6.0
-Release:  1%{?dist}
+Release:  2.%{PATCHVER}%{?dist}
 Epoch:    32
 Url:      http://www.isc.org/products/BIND/
 Buildroot:%{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
@@ -600,6 +602,9 @@ rm -rf ${RPM_BUILD_ROOT}
 %ghost %{chroot_prefix}/etc/localtime
 
 %changelog
+* Thu Jan 08 2009 Adam Tkac <atkac redhat com> 32:9.6.0-2.P1
+- 9.6.0-P1 release (CVE-2009-0025)
+
 * Mon Jan 05 2009 Adam Tkac <atkac redhat com> 32:9.6.0-1
 - Happy new year
 - 9.6.0 release
diff --git a/sources b/sources
index 6eb7de0..3124586 100644
--- a/sources
+++ b/sources
@@ -1,5 +1,5 @@
 de68e10e91e05ab100be879b5bcaa6cb  config-4.tar.bz2
 13fef79f99fcefebb51d84b08805de51  libbind-man.tar.gz
 4faa4395b955e5f8a3d50f308b9fabc8  bind-chroot.tar.bz2
-287231d759ad83ed51f60f8a9f8176b9  bind-9.6.0.tar.gz
+886b7eae55cfdc8cd8d2ca74a2f99c6e  bind-9.6.0-P1.tar.gz
 3d1dad3630ec3510c8ab0ac2217a3317  libbind-9.5.1b2.tar.bz2