diff --git a/.gitignore b/.gitignore
index 96c15bc..45af030 100644
--- a/.gitignore
+++ b/.gitignore
@@ -28,3 +28,4 @@ bind-9.7.2b1.tar.gz
 /bind-9.9.2.tar.gz
 /bind-9.9.2-P1.tar.gz
 /config-9.tar.bz2
+/bind-9.9.2-P2.tar.gz
diff --git a/bind.spec b/bind.spec
index c387012..d076049 100644
--- a/bind.spec
+++ b/bind.spec
@@ -2,7 +2,7 @@
 # Red Hat BIND package .spec file
 #
 
-%define PATCHVER P1
+%define PATCHVER P2
 #%define PREVER rc2
 #%define VERSION %{version}%{PREVER}
 %define VERSION %{version}-%{PATCHVER}
@@ -22,7 +22,7 @@ Summary:  The Berkeley Internet Name Domain (BIND) DNS (Domain Name System) serv
 Name:     bind
 License:  ISC
 Version:  9.9.2
-Release:  6.%{PATCHVER}%{?dist}
+Release:  7.%{PATCHVER}%{?dist}
 Epoch:    32
 Url:      http://www.isc.org/products/BIND/
 Buildroot:%{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
@@ -773,6 +773,9 @@ rm -rf ${RPM_BUILD_ROOT}
 %endif
 
 %changelog
+* Wed Mar 27 2013 Tomas Hozza <thozza@redhat.com> 32:9.9.2-7.P2
+- New upstream patch version fixing CVE-2013-2266 (#928032)
+
 * Wed Mar 06 2013 Tomas Hozza <thozza@redhat.com> 32:9.9.2-6.P1
 - Fix Makefile.in to include header added by rate limiting patch (#918330)
 
diff --git a/rl-9.9.2-P1.patch b/rl-9.9.2-P1.patch
index 10067b9..c95a657 100644
--- a/rl-9.9.2-P1.patch
+++ b/rl-9.9.2-P1.patch
@@ -3261,4 +3261,4 @@ diff -up bind-9.9.2-P1/version.orig bind-9.9.2-P1/version
 -PATCHVER=2
 +PATCHVER=2-rl.028.23
  RELEASETYPE=-P
- RELEASEVER=1
+ RELEASEVER=2
diff --git a/sources b/sources
index ee4f256..3341dbb 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
-44b9d1feb11de09811160775f94c2554  bind-9.9.2-P1.tar.gz
+2be7763c99b7e7b42ac3a18a267ce1aa  bind-9.9.2-P2.tar.gz
 6f22bed78f41bc27fa6d885b648da63e  config-9.tar.bz2