diff --git a/dhcp-4.2.0-P1.tar.bz2 b/dhcp-4.2.0-P1.tar.bz2
deleted file mode 100644
index 09fcc3b..0000000
--- a/dhcp-4.2.0-P1.tar.bz2
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:f4249504f17f1696f0d8ec9b975f193564f460e50c58c631e560dce130aadfe2
-size 8434029
diff --git a/dhcp-4.2.0-P2.tar.bz2 b/dhcp-4.2.0-P2.tar.bz2
new file mode 100644
index 0000000..3815edd
--- /dev/null
+++ b/dhcp-4.2.0-P2.tar.bz2
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:1fb1e8f4f4bef848bc7c5cbac510c2d4091cf4a10ca831ab892512f48274983e
+size 8432072
diff --git a/dhcp.changes b/dhcp.changes
index 1d33b09..689e067 100644
--- a/dhcp.changes
+++ b/dhcp.changes
@@ -1,3 +1,13 @@
+-------------------------------------------------------------------
+Mon Dec 13 08:51:59 UTC 2010 - mt@suse.de
+
+- Updated to ISC DHCP 4.2.0-P2, a security release fixing the
+  handling of connection requests on the failover port.
+  Previously a connection request from a source that wasn't
+  listed as a failover peer would cause the server to become
+  non-responsive. ([ISC-Bugs #22679] CERT: VU#159528 CVE:
+  CVE-2010-3616, bnc#659059).
+
 -------------------------------------------------------------------
 Tue Dec  7 14:50:23 UTC 2010 - mt@suse.de
 
diff --git a/dhcp.spec b/dhcp.spec
index eab08f8..0f422bc 100644
--- a/dhcp.spec
+++ b/dhcp.spec
@@ -17,7 +17,7 @@
 
 # norootforbuild
 
-%define isc_version   4.2.0-P1
+%define isc_version   4.2.0-P2
 %define susefw2dir    %{_sysconfdir}/sysconfig/SuSEfirewall2.d/services
 %define omc_prefix    /usr/share/omc
 %define omc_svcdir    %{omc_prefix}/svcinfo.d
@@ -35,8 +35,8 @@ BuildRequires:  dos2unix
 License:        BSD3c(or similar)
 Group:          Productivity/Networking/Boot/Servers
 AutoReqProv:    on
-Version:        4.2.0.P1
-Release:        2
+Version:        4.2.0.P2
+Release:        0
 Summary:        Common Files Used by ISC DHCP Software
 Url:            http://www.isc.org/software/dhcp
 Source0:        dhcp-%{isc_version}.tar.bz2