diff --git a/bind-9.7.2P2.tar.gz b/bind-9.7.2P2.tar.gz
deleted file mode 100644
index 6d91d9c..0000000
--- a/bind-9.7.2P2.tar.gz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:18e3a1607ae7f7ef49ab43663073d30318ed3713da62d96bc1537f4520fe11bd
-size 7697012
diff --git a/bind-9.7.2P3.tar.gz b/bind-9.7.2P3.tar.gz
new file mode 100644
index 0000000..509135b
--- /dev/null
+++ b/bind-9.7.2P3.tar.gz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:2a2aae1894de059dda3a07fcb5002dd83a95eaa7131419dff5d2b07f6d5a6a83
+size 7769100
diff --git a/bind.changes b/bind.changes
index 94a61ee..8432b35 100644
--- a/bind.changes
+++ b/bind.changes
@@ -1,3 +1,13 @@
+-------------------------------------------------------------------
+Thu Dec  2 17:38:44 CET 2010 - ug@suse.de
+
+- fixed VUL-0: bind: Key algorithm rollover bug
+  bnc#657102, CVE-2010-3614
+- fixed VUL-0: bind: allow-query processed incorrectly
+  bnc#657120, CVE-2010-3615
+- fixed VUL-0: bind: cache incorrectly allows a ncache entry and a rrsig for the same type
+  bnc#657129, CVE-2010-3613
+
 -------------------------------------------------------------------
 Tue Nov 23 14:38:49 CET 2010 - ug@suse.de
 
diff --git a/bind.spec b/bind.spec
index bd9fb2e..1e4f6f1 100644
--- a/bind.spec
+++ b/bind.spec
@@ -20,12 +20,12 @@
 
 Name:           bind
 %define pkg_name bind
-%define pkg_vers 9.7.2P2
+%define pkg_vers 9.7.2P3
 BuildRequires:  openldap2-devel
 BuildRequires:  libcap libcap-devel libmysqlclient-devel libxml2-devel openssl openssl-devel
 BuildRequires:  krb5-devel
 Summary:        Domain Name System (DNS) Server (named)
-Version:        9.7.2P2
+Version:        9.7.2P3
 Release:        2
 License:        BSD3c(or similar) ; MIT License (or similar)
 Group:          Productivity/Networking/DNS/Servers