diff --git a/etcd.changes b/etcd.changes
index 83161c0..bb071c0 100644
--- a/etcd.changes
+++ b/etcd.changes
@@ -1,4 +1,14 @@
 -------------------------------------------------------------------
+Wed Dec 19 01:28:24 UTC 2018 - clee@suse.com
+
+- Updated to a supported version of Go (due to security reasons)
+  * bsc#1118897 CVE-2018-16873
+    go#29230 cmd/go: remote command execution during "go get -u"
+  * bsc#1118898 CVE-2018-16874
+    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
+  * bsc#1118899 CVE-2018-16875
+    go#29233 crypto/x509: CPU denial of service
+-------------------------------------------------------------------
 Wed Dec 12 12:43:23 UTC 2018 - alvaro.saurin@suse.com
 
 - Updated to a supported version of Go (due to security reasons)
diff --git a/etcd.spec b/etcd.spec
index 8e8b66b..1f85fff 100644
--- a/etcd.spec
+++ b/etcd.spec
@@ -38,6 +38,8 @@ BuildRequires:  shadow
 BuildRequires:  systemd-rpm-macros
 BuildRequires:  xz
 BuildRequires:  golang(API) = 1.11
+# go1.11.3 contains sec. fixes bsc#1118897(CVE-2018-16873) bsc#1118897(CVE-2018-16873) bsc#1118899(CVE-2018-16875)
+BuildRequires:  go1.11 >= 1.11.3
 ExcludeArch:    %ix86
 Requires(post): %fillup_prereq
 BuildRoot:      %{_tmppath}/%{name}-%{version}-build