diff -Nru isc-dhcp-4.2.2.dfsg.1/debian/bind-patches/cve-2013-2494.patch isc-dhcp-4.2.2.dfsg.1/debian/bind-patches/cve-2013-2494.patch
--- isc-dhcp-4.2.2.dfsg.1/debian/bind-patches/cve-2013-2494.patch	1969-12-31 19:00:00.000000000 -0500
+++ isc-dhcp-4.2.2.dfsg.1/debian/bind-patches/cve-2013-2494.patch	2013-03-31 20:38:16.000000000 -0400
@@ -0,0 +1,40 @@
+Index: bind-9.8.3/config.h.in
+===================================================================
+--- bind-9.8.3.orig/config.h.in	2012-05-09 22:43:18.000000000 +0000
++++ bind-9.8.3/config.h.in	2013-03-31 22:54:10.010907735 +0000
+@@ -280,9 +280,6 @@
+ /* Define if your OpenSSL version supports GOST. */
+ #undef HAVE_OPENSSL_GOST
+ 
+-/* Define to 1 if you have the <regex.h> header file. */
+-#undef HAVE_REGEX_H
+-
+ /* Define to 1 if you have the `setegid' function. */
+ #undef HAVE_SETEGID
+ 
+Index: bind-9.8.3/configure
+===================================================================
+--- bind-9.8.3.orig/configure	2012-05-09 22:43:18.000000000 +0000
++++ bind-9.8.3/configure	2013-03-31 22:53:24.410908128 +0000
+@@ -20443,7 +20443,7 @@
+ fi
+ 
+ 
+-for ac_header in fcntl.h regex.h sys/time.h unistd.h sys/sockio.h sys/select.h sys/param.h sys/sysctl.h net/if6.h
++for ac_header in fcntl.h sys/time.h unistd.h sys/sockio.h sys/select.h sys/param.h sys/sysctl.h net/if6.h
+ do :
+   as_ac_Header=`$as_echo "ac_cv_header_$ac_header" | $as_tr_sh`
+ ac_fn_c_check_header_compile "$LINENO" "$ac_header" "$as_ac_Header" "$ac_includes_default
+Index: bind-9.8.3/configure.in
+===================================================================
+--- bind-9.8.3.orig/configure.in	2012-05-09 22:43:18.000000000 +0000
++++ bind-9.8.3/configure.in	2013-03-31 22:53:34.434908041 +0000
+@@ -298,7 +298,7 @@
+ 
+ AC_HEADER_STDC
+ 
+-AC_CHECK_HEADERS(fcntl.h regex.h sys/time.h unistd.h sys/sockio.h sys/select.h sys/param.h sys/sysctl.h net/if6.h,,,
++AC_CHECK_HEADERS(fcntl.h sys/time.h unistd.h sys/sockio.h sys/select.h sys/param.h sys/sysctl.h net/if6.h,,,
+ [$ac_includes_default
+ #ifdef HAVE_SYS_PARAM_H
+ # include <sys/param.h>
diff -Nru isc-dhcp-4.2.2.dfsg.1/debian/bind-patches/series isc-dhcp-4.2.2.dfsg.1/debian/bind-patches/series
--- isc-dhcp-4.2.2.dfsg.1/debian/bind-patches/series	1969-12-31 19:00:00.000000000 -0500
+++ isc-dhcp-4.2.2.dfsg.1/debian/bind-patches/series	2013-03-31 20:38:16.000000000 -0400
@@ -0,0 +1 @@
+cve-2013-2494.patch
diff -Nru isc-dhcp-4.2.2.dfsg.1/debian/changelog isc-dhcp-4.2.2.dfsg.1/debian/changelog
--- isc-dhcp-4.2.2.dfsg.1/debian/changelog	2013-02-16 15:41:00.000000000 -0500
+++ isc-dhcp-4.2.2.dfsg.1/debian/changelog	2013-03-31 20:42:30.000000000 -0400
@@ -1,3 +1,10 @@
+isc-dhcp (4.2.2.dfsg.1-5+deb70u4) testing-proposed-updates; urgency=high
+
+  * Fix cve-2013-2494: issues with regular expression handling in the embedded
+    bind library (closes: #704426).
+
+ -- Michael Gilbert <mgilbert@debian.org>  Mon, 01 Apr 2013 00:41:48 +0000
+
 isc-dhcp (4.2.2.dfsg.1-5+deb70u3) testing-proposed-updates; urgency=medium
 
   * Run exit hooks when "dhclient -1" fails (closes: #486520).
diff -Nru isc-dhcp-4.2.2.dfsg.1/debian/control isc-dhcp-4.2.2.dfsg.1/debian/control
--- isc-dhcp-4.2.2.dfsg.1/debian/control	2012-09-17 17:48:31.000000000 -0400
+++ isc-dhcp-4.2.2.dfsg.1/debian/control	2013-03-31 20:38:16.000000000 -0400
@@ -11,6 +11,7 @@
  debhelper (>> 7),
  dpkg-dev (>= 1.13.2),
  groff,
+ quilt,
  autoconf,
  automake,
  pkg-config,
diff -Nru isc-dhcp-4.2.2.dfsg.1/debian/rules isc-dhcp-4.2.2.dfsg.1/debian/rules
--- isc-dhcp-4.2.2.dfsg.1/debian/rules	2012-10-14 16:12:29.000000000 -0400
+++ isc-dhcp-4.2.2.dfsg.1/debian/rules	2013-03-31 20:38:50.000000000 -0400
@@ -35,7 +35,14 @@
 CFLAGS += -D_PATH_DHCLIENT_CONF='"/etc/dhcp/dhclient.conf"'
 CFLAGS += -DNOMINUM
 
-build-ldap-stamp:
+
+bind-stamp:
+	dh_testdir
+	cd bind && tar xf bind.tar.gz && cd bind-* && \
+	    QUILT_PATCHES=../../debian/bind-patches quilt push -a
+	touch $@
+
+build-ldap-stamp: bind-stamp
 	dh_testdir
 
 	./configure \
@@ -63,7 +70,7 @@
 	dh_testdir
 	touch $@
 
-build-non-ldap-stamp:
+build-non-ldap-stamp: bind-stamp
 	dh_testdir
 
 	./configure \
@@ -80,7 +87,7 @@
 
 clean:
 	dh_testdir
-	rm -f build*stamp install*stamp
+	rm -f build*stamp install*stamp bind-stamp
 	rm -Rf isc-dhcp-server-ldap
 
 	[ ! -f Makefile ] || $(MAKE) distclean