diff --git a/.gitignore b/.gitignore
index 26581b7..d383c18 100644
--- a/.gitignore
+++ b/.gitignore
@@ -11,3 +11,4 @@ bind-9.7.2b1.tar.gz
 /bind-9.7.3.tar.gz
 /bind-9.8.0rc1.tar.gz
 /bind-9.8.0.tar.gz
+/bind-9.8.0-P1.tar.gz
diff --git a/bind.spec b/bind.spec
index 87a50b8..3a597e0 100644
--- a/bind.spec
+++ b/bind.spec
@@ -2,11 +2,11 @@
 # Red Hat BIND package .spec file
 #
 
-#%define PATCHVER P3
+%define PATCHVER P1
 #%define PREVER rc1
-#%define VERSION %{version}-%{PATCHVER}
+#%define VERSION %{version}
 #%define VERSION %{version}%{PREVER}
-%define VERSION %{version}
+%define VERSION %{version}-%{PATCHVER}
 
 %{?!SDB:       %define SDB       1}
 %{?!test:      %define test      0}
@@ -22,7 +22,7 @@ Summary:  The Berkeley Internet Name Domain (BIND) DNS (Domain Name System) serv
 Name:     bind
 License:  ISC
 Version:  9.8.0
-Release:  2%{?dist}
+Release:  3.%{PATCHVER}%{?dist}
 Epoch:    32
 Url:      http://www.isc.org/products/BIND/
 Buildroot:%{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
@@ -770,6 +770,9 @@ rm -rf ${RPM_BUILD_ROOT}
 %endif
 
 %changelog
+* Fri May 06 2011 Adam Tkac <atkac redhat com> 32:9.8.0-3.P1
+- update to 9.8.0-P1 (CVE-2011-1907)
+
 * Wed Mar 23 2011 Dan Horák <dan@danny.cz> - 32:9.8.0-2
 - rebuilt for mysql 5.5.10 (soname bump in libmysqlclient)
 
diff --git a/sources b/sources
index ba29980..10e31c5 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
-e802ac97ca419c2ddfc043509bcb17bc  bind-9.8.0.tar.gz
+d97ecd8f62a4cf4a769742c79cd8f921  bind-9.8.0-P1.tar.gz
 76857526420dc8e153ad688aeb5a2c4b  config-8.tar.bz2