diff --git a/.gitignore b/.gitignore
index bbd2ee8..9c1b03b 100644
--- a/.gitignore
+++ b/.gitignore
@@ -14,3 +14,4 @@
 /dhcp-4.2.4rc2.tar.gz
 /dhcp-4.2.4.tar.gz
 /dhcp-4.2.4-P1.tar.gz
+/dhcp-4.2.4-P2.tar.gz
diff --git a/dhcp.spec b/dhcp.spec
index b167ca1..b6836b0 100644
--- a/dhcp.spec
+++ b/dhcp.spec
@@ -8,7 +8,7 @@
 %global dhcpconfdir %{_sysconfdir}/dhcp
 
 
-%global patchver P1
+%global patchver P2
 #%%global prever rc2
 
 %global VERSION %{version}-%{patchver}
@@ -18,7 +18,7 @@
 Summary:  Dynamic host configuration protocol software
 Name:     dhcp
 Version:  4.2.4
-Release:  14.%{patchver}%{?dist}
+Release:  15.%{patchver}%{?dist}
 # NEVER CHANGE THE EPOCH on this package.  The previous maintainer (prior to
 # dcantrell maintaining the package) made incorrect use of the epoch and
 # that's why it is at 12 now.  It should have never been used, but it was.
@@ -559,6 +559,9 @@ fi
 
 
 %changelog
+* Thu Sep 13 2012 Tomas Hozza <thozza@redhat.com> - 12:4.2.4-15.P2
+- 4.2.4-P2: fix for CVE-2012-3955 (#856770)
+
 * Fri Aug 24 2012 Tomas Hozza <thozza@redhat.com> - 12:4.2.4-14.P1
 - SystemD unit files don't use Environment files any more (#850558)
 - NetworkManager dispatcher script doesn't use DHCPDARGS any more 
diff --git a/sources b/sources
index fedca57..3b72467 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-0ca7181024651f6323951d5498c8020b  dhcp-4.2.4-P1.tar.gz
+fe36056f2d274fa4b82a5422f192e65f  dhcp-4.2.4-P2.tar.gz