diff --git a/.gitignore b/.gitignore
index 9adad32..17431f7 100644
--- a/.gitignore
+++ b/.gitignore
@@ -56,3 +56,4 @@ bind-9.7.2b1.tar.gz
 /config-14.tar.bz2
 /bind-9.10.2-P1.tar.gz
 /bind-9.10.2-P2.tar.gz
+/bind-9.10.2-P3.tar.gz
diff --git a/bind.spec b/bind.spec
index fed214a..123098a 100644
--- a/bind.spec
+++ b/bind.spec
@@ -2,7 +2,7 @@
 # Red Hat BIND package .spec file
 #
 
-%global PATCHVER P2
+%global PATCHVER P3
 #%%global PREVER rc2
 %global VERSION %{version}%{?PREVER}%{?PATCHVER:-%{PATCHVER}}
 
@@ -24,7 +24,7 @@ Summary:  The Berkeley Internet Name Domain (BIND) DNS (Domain Name System) serv
 Name:     bind
 License:  ISC
 Version:  9.10.2
-Release:  8%{?PATCHVER:.%{PATCHVER}}%{?PREVER:.%{PREVER}}%{?dist}
+Release:  9%{?PATCHVER:.%{PATCHVER}}%{?PREVER:.%{PREVER}}%{?dist}
 Epoch:    32
 Url:      http://www.isc.org/products/BIND/
 Buildroot:%{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
@@ -996,6 +996,9 @@ rm -rf ${RPM_BUILD_ROOT}
 
 
 %changelog
+* Wed Jul 29 2015 Tomas Hozza <thozza@redhat.com> - 32:9.10.2-9.P3
+- Update to 9.10.2-P3 to fix CVE-2015-5477
+
 * Thu Jul 09 2015 Tomas Hozza <thozza@redhat.com> - 32:9.10.2-8.P2
 - Update to 9.10.2-P2
 
diff --git a/sources b/sources
index 7f0e991..9c11850 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
-55d8f094bc10baae0e23e5e9100ba320  bind-9.10.2-P2.tar.gz
 dd419c3869c9bb1d73e044177ec1623c  config-14.tar.bz2
+a810d5d65fbdcf28dcda80d646913c3a  bind-9.10.2-P3.tar.gz