diff --git a/.gitignore b/.gitignore
index c3e7ce7..f16d5b0 100644
--- a/.gitignore
+++ b/.gitignore
@@ -7,3 +7,4 @@
 /dhcp-4.2.2.tar.gz
 /dhcp-4.2.3rc1.tar.gz
 /dhcp-4.2.3.tar.gz
+/dhcp-4.2.3-P1.tar.gz
diff --git a/dhcp.spec b/dhcp.spec
index bb43eda..755181a 100644
--- a/dhcp.spec
+++ b/dhcp.spec
@@ -11,18 +11,18 @@
 %global dhcpconfdir %{_sysconfdir}/dhcp
 
 # Patch version 
-#%global patchver P1
+%global patchver P1
 # Pre-Release version
-#%global prever rc1
+#%%global prever rc1
 
-#%global VERSION %{version}-%{patchver}
-#%global VERSION %{version}%{prever}
-%global VERSION %{version}
+#%%global VERSION %{version}%{prever}
+#%%global VERSION %{version}
+%global VERSION %{version}-%{patchver}
 
 Summary:  Dynamic host configuration protocol software
 Name:     dhcp
 Version:  4.2.3
-Release:  7%{?dist}
+Release:  8.%{patchver}%{?dist}
 # NEVER CHANGE THE EPOCH on this package.  The previous maintainer (prior to
 # dcantrell maintaining the package) made incorrect use of the epoch and
 # that's why it is at 12 now.  It should have never been used, but it was.
@@ -675,6 +675,9 @@ fi
 %{_initddir}/dhcrelay
 
 %changelog
+* Fri Dec 09 2011 Jiri Popelka <jpopelka@redhat.com> - 12:4.2.3-8.P1
+- 4.2.3-P1: fix for CVE-2011-4539 (#765681)
+
 * Thu Nov 24 2011 Jiri Popelka <jpopelka@redhat.com> - 12:4.2.3-7
 - Send DHCPDECLINE and exit(2) when duplicate address was detected and
   dhclient had been started with '-1' (#756759).
diff --git a/sources b/sources
index a44cc5f..7d9a2fa 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-a06649ec5336d284fc86a0232c0edd63  dhcp-4.2.3.tar.gz
+04599f1557a5cafd10d7745267a68c8b  dhcp-4.2.3-P1.tar.gz