diff --git a/patches.tar.bz2 b/patches.tar.bz2
index 65df9c5..a431ccc 100644
--- a/patches.tar.bz2
+++ b/patches.tar.bz2
@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:76c9513a13add84281371545dd86fa3d3f1694d18eb3c2ba92ebc20773f77f68
-size 278706
+oid sha256:b1d7aef655bfcf783d078f8dc200c676a435dc91f54b96f519cd61745d141908
+size 280856
diff --git a/samba-4.1.10.tar.asc b/samba-4.1.10.tar.asc
deleted file mode 100644
index 9f1f5c5..0000000
--- a/samba-4.1.10.tar.asc
+++ /dev/null
@@ -1,7 +0,0 @@
------BEGIN PGP SIGNATURE-----
-Version: GnuPG v1
-
-iEYEABECAAYFAlPV/M8ACgkQbzORW2Vot+pvVACfem/PeNo4Fwa6RsD4PC8Pe+n9
-yloAnRAeBmfMocFwM5WC09FPmbTcCsyX
-=eM9N
------END PGP SIGNATURE-----
diff --git a/samba-4.1.10.tar.gz b/samba-4.1.10.tar.gz
deleted file mode 100644
index 6788434..0000000
--- a/samba-4.1.10.tar.gz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:3404f0004f6ed20be7de38aae05e46c7828c53437ae4c015567aeff2988f8675
-size 19510997
diff --git a/samba-4.1.11.tar.asc b/samba-4.1.11.tar.asc
new file mode 100644
index 0000000..f188b61
--- /dev/null
+++ b/samba-4.1.11.tar.asc
@@ -0,0 +1,7 @@
+-----BEGIN PGP SIGNATURE-----
+Version: GnuPG v1
+
+iEYEABECAAYFAlPaPr0ACgkQbzORW2Vot+pTpgCgonGsTFo5cw+4C2nIbhkrxG0s
+CwMAoLrNdPvJQy33Bs5KNtg0M7YVILdI
+=6InX
+-----END PGP SIGNATURE-----
diff --git a/samba-4.1.11.tar.gz b/samba-4.1.11.tar.gz
new file mode 100644
index 0000000..ad86515
--- /dev/null
+++ b/samba-4.1.11.tar.gz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:565e663a28eb785e00b0df3086319bb0b328ed2b1b8765c3d962757d3897ecfe
+size 19510128
diff --git a/samba.changes b/samba.changes
index 1ca91e8..83c30ee 100644
--- a/samba.changes
+++ b/samba.changes
@@ -1,3 +1,26 @@
+-------------------------------------------------------------------
+Fri Aug  1 16:34:44 UTC 2014 - ddiss@suse.com
+
+- Fix winbind service parameter usage; (bnc#890005).
+
+-------------------------------------------------------------------
+Fri Aug  1 13:47:57 UTC 2014 - lmuelle@suse.com
+
+- lib/param: change the default for "winbind expand groups" to "0";
+  (bnc#890008).
+
+-------------------------------------------------------------------
+Fri Aug  1 13:42:19 UTC 2014 - lmuelle@suse.com
+
+- Update to 4.1.11.
+  + A malicious browser can send packets that may overwrite the heap of the
+    target nmbd NetBIOS name services daemon; CVE-2014-3560; (bnc#889429).
+
+-------------------------------------------------------------------
+Wed Jul 30 11:39:30 UTC 2014 - ddiss@suse.com
+
+- Fix "net time" segfault; (bso#10728); (bnc#889539).
+
 -------------------------------------------------------------------
 Mon Jul 28 10:12:04 UTC 2014 - lmuelle@suse.com
 
diff --git a/samba.spec b/samba.spec
index 67b358e..c6a50b8 100644
--- a/samba.spec
+++ b/samba.spec
@@ -121,7 +121,7 @@ BuildRequires:  gpg-offline
 BuildRequires:  systemd
 BuildRequires:  systemd-devel
 %endif
-%define	samba_ver 4.1.10
+%define	samba_ver 4.1.11
 %define	samba_ver_suffix %nil
 %if "%{samba_ver_suffix}" == ""
 %define samba_source_location http://ftp.samba.org/pub/samba/stable/samba-%{version}.tar.gz
@@ -148,11 +148,11 @@ BuildRequires:  systemd-devel
 %else
 %define	build_make_smp_mflags %{?jobs:-j%jobs}
 %endif
-%define SOURCE_TIMESTAMP 3266
+%define SOURCE_TIMESTAMP 3274
 %define BRANCH %{version}
 %global with_mitkrb5 1
 %global with_dc 0
-Version:        4.1.10
+Version:        4.1.11
 Release:        0
 Url:            http://www.samba.org/
 Provides:       samba-gplv3 = %{version}
diff --git a/vendor-files.tar.bz2 b/vendor-files.tar.bz2
index ca91eb1..b83577b 100644
--- a/vendor-files.tar.bz2
+++ b/vendor-files.tar.bz2
@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:e5a4080e7b16e5fa906252ef1755c3c383991c48cf29f539799b1eca4385ceb7
-size 54622
+oid sha256:07e26efe1f46b9dd9cd561516465f7b79f85f07589d709f647c740cd58dfd0a1
+size 54734