diff --git a/flannel.changes b/flannel.changes
index 185725d..ec510f2 100644
--- a/flannel.changes
+++ b/flannel.changes
@@ -1,3 +1,19 @@
+-------------------------------------------------------------------
+Wed Dec 19 16:55:33 UTC 2018 - clee@suse.com
+
+- Refactor go to go1.11 for BuildRequires 
+
+-------------------------------------------------------------------
+Wed Dec 19 01:18:01 UTC 2018 - clee@suse.com
+
+- Updated to a supported version of Go (due to security reasons)
+  * bsc#1118897 CVE-2018-16873
+    go#29230 cmd/go: remote command execution during "go get -u"
+  * bsc#1118898 CVE-2018-16874
+    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
+  * bsc#1118899 CVE-2018-16875
+    go#29233 crypto/x509: CPU denial of service
+
 -------------------------------------------------------------------
 Wed Dec 12 12:43:24 UTC 2018 - alvaro.saurin@suse.com
 
diff --git a/flannel.spec b/flannel.spec
index 56d3c6c..89f17a4 100644
--- a/flannel.spec
+++ b/flannel.spec
@@ -38,6 +38,8 @@ BuildRequires:  golang-packaging
 BuildRequires:  systemd
 BuildRequires:  xz
 BuildRequires:  golang(API) >= 1.11
+# go1.11.3 contains sec. fixes bsc#1118897(CVE-2018-16873) bsc#1118897(CVE-2018-16873) bsc#1118899(CVE-2018-16875)
+BuildRequires:  go1.11 >= 1.11.3
 Requires(post): %fillup_prereq
 BuildRoot:      %{_tmppath}/%{name}-%{version}-build
 ExcludeArch:    s390