diff --git a/samba-4.11.0+git.95.c88b5f2c0c6.tar.bz2 b/samba-4.11.0+git.95.c88b5f2c0c6.tar.bz2
deleted file mode 100644
index b92779e..0000000
--- a/samba-4.11.0+git.95.c88b5f2c0c6.tar.bz2
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:f9318043addcb52fab59d96e0972c2921e5219595890f805f584acfaf47db9c2
-size 25021817
diff --git a/samba-4.11.2+git.99.f93cc798f2e.tar.bz2 b/samba-4.11.2+git.99.f93cc798f2e.tar.bz2
new file mode 100644
index 0000000..5e0416e
--- /dev/null
+++ b/samba-4.11.2+git.99.f93cc798f2e.tar.bz2
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:4ba85ab3cd961153a618dbfbbcd14932667d12cb522ed5109a49974c28924a6b
+size 25032134
diff --git a/samba.changes b/samba.changes
index 623df64..b623f2f 100644
--- a/samba.changes
+++ b/samba.changes
@@ -1,3 +1,43 @@
+Tue Oct 29 17:22:30 UTC 2019 - Jim McDonough <jmcdonough@suse.com>
+
+- Update to samba 4.11.2
+  + CVE-2019-10218: Client code can return filenames containing
+    path separators; (bsc#1144902); (bso#14071).
+  + CVE-2019-14833: Samba AD DC check password script does not
+    receive the full password; (bso#12438).
+  + CVE-2019-14847: User with "get changes" permission can crash
+    AD DC LDAP server via dirsync; (bso#14040).
+- Fixes from 4.11.1
+  + Overlinking libreplace against librt and pthread against every
+    binary or library causes issues; (bso#14140);
+  + kpasswd fails when built with MIT Kerberos; (bso#14155);
+  + Fix spnego fallback from kerberos to ntlmssp in smbd server;
+    (bso#14106);
+  + Stale file handle error when using mkstemp on a share; (bso#14137);
+  + non-AES schannel broken; (bso#14134);
+  + Joining Active Directory should not use SAMR to set the password;
+    (bso#13884);
+  + smbclient can blunder into the SMB1 specific cli_RNetShareEnum()
+    call on an SMB2 connection; (bso#14152);
+  + Deleted records can be resurrected during recovery; (bso#14147);
+  + getpwnam and getpwuid need to return data for ID_TYPE_BOTH group;
+    (bso#14141);
+  + winbind does not list forest trusts with additional trust
+    attributes; (bso#14130);
+  + fault report points to outdated documentation; (bso#14139);
+  + pam_winbind with krb5_auth or wbinfo -K doesn't work for users of
+    trusted domains/forests; (bso#14124);
+  + classicupgrade results in uncaught exception - a bytes-like object
+    is required, not 'str'; (bso#14136);
+  + pod2man is not longer required, stop checking at build time;
+    (bso#14131);
+  + Exit code of ctdb nodestatus should not be influenced by deleted
+    nodes; (bso#14129);
+  + username/password authentication doesn't work with CUPS and
+    smbspool; (bso#14128);
+  + smbc_readdirplus() is incompatible with smbc_telldir() and
+    smbc_lseekdir(); (bso#14094);
+
 -------------------------------------------------------------------
 Sat Oct  5 14:20:06 UTC 2019 - James McDonough <jmcdonough@suse.com>
 
diff --git a/samba.spec b/samba.spec
index 66a89b4..0bca707 100644
--- a/samba.spec
+++ b/samba.spec
@@ -164,7 +164,7 @@ BuildRequires:  libtasn1-devel >= 3.8
 %else
 %define	build_make_smp_mflags %{?jobs:-j%jobs}
 %endif
-Version:        4.11.0+git.95.c88b5f2c0c6
+Version:        4.11.2+git.99.f93cc798f2e
 Release:        0
 Url:            https://www.samba.org/
 Obsoletes:      samba-32bit < %{version}