diff --git a/.gitignore b/.gitignore
index e8832c9..774f56c 100644
--- a/.gitignore
+++ b/.gitignore
@@ -85,3 +85,4 @@ bind-9.7.2b1.tar.gz
 /bind-9.11.4rc1.tar.gz
 /bind-9.11.4.tar.gz
 /bind-9.11.4-P1.tar.gz
+/bind-9.11.4-P2.tar.gz
diff --git a/bind.spec b/bind.spec
index 0b32708..08a4523 100644
--- a/bind.spec
+++ b/bind.spec
@@ -2,7 +2,7 @@
 # Red Hat BIND package .spec file
 #
 
-%global PATCHVER P1
+%global PATCHVER P2
 #%%global PREVER rc1
 %global BINDVERSION %{version}%{?PREVER}%{?PATCHVER:-%{PATCHVER}}
 
@@ -52,7 +52,7 @@ Summary:  The Berkeley Internet Name Domain (BIND) DNS (Domain Name System) serv
 Name:     bind
 License:  MPLv2.0
 Version:  9.11.4
-Release:  8%{?PATCHVER:.%{PATCHVER}}%{?PREVER:.%{PREVER}}%{?dist}
+Release:  9%{?PATCHVER:.%{PATCHVER}}%{?PREVER:.%{PREVER}}%{?dist}
 Epoch:    32
 Url:      http://www.isc.org/products/BIND/
 #
@@ -1438,6 +1438,9 @@ rm -rf ${RPM_BUILD_ROOT}
 
 
 %changelog
+* Thu Sep 20 2018 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-9.P2
+- Update to bind-9.11.4-P2
+
 * Fri Aug 24 2018 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-7.P1
 - Add support for OpenSSL provided random data
 - Replace unoptimized code by OpenSSL counterparts
diff --git a/sources b/sources
index fc29755..43558ac 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
-SHA512 (bind-9.11.4-P1.tar.gz) = 7d7f3f6b557a49d1a808c0ad7d1f42f99f2e1e510c834078bd1fa88697cbc447634a461e8de1260a9668967f51797de8b40761dddfc6fc24055b2d5b494eec0d
+SHA512 (bind-9.11.4-P2.tar.gz) = 6c01810526fc40485a6c0403d1ddc3b76d2e59b3426b5789436bd671f158d2fa0ea7c0aef2de81998ec715dabd06683fed7b17224d5c794c61e7100a69d4cb60
 SHA512 (config-18.tar.bz2) = c0a0a1fd58a7e2c09fe69915b9a4c682d1b6c96e78583f63ce5355f663c9509d28facfd3aa078b228b69954d0af4bfa484ef661a9568aaafe6eade97dda3c3d9