diff --git a/webkit2gtk3-boo1095611-null-page-url.patch b/webkit2gtk3-boo1095611-null-page-url.patch
deleted file mode 100644
index 4aac31e..0000000
--- a/webkit2gtk3-boo1095611-null-page-url.patch
+++ /dev/null
@@ -1,25 +0,0 @@
-Subversion Revision: 232297
-diff --git a/Source/WebKit/UIProcess/API/glib/WebKitFaviconDatabase.cpp b/Source/WebKit/UIProcess/API/glib/WebKitFaviconDatabase.cpp
-index 372443e2d3bc121f54d876b54be413de0cecc6d2..adb39007e705e676363a8aa2b3df6aa537c56f3e 100644
---- a/Source/WebKit/UIProcess/API/glib/WebKitFaviconDatabase.cpp
-+++ b/Source/WebKit/UIProcess/API/glib/WebKitFaviconDatabase.cpp
-@@ -192,6 +192,9 @@ static void webkitFaviconDatabaseSetIconURLForPageURL(WebKitFaviconDatabase* dat
-     if (!priv->isURLImportCompleted)
-         return;
- 
-+    if (pageURL.isEmpty())
-+        return;
-+
-     const String& currentIconURL = priv->pageURLToIconURLMap.get(pageURL);
-     if (iconURL == currentIconURL)
-         return;
-@@ -316,6 +319,9 @@ void webkitFaviconDatabaseSetIconForPageURL(WebKitFaviconDatabase* database, con
-     if (!webkitFaviconDatabaseIsOpen(database))
-         return;
- 
-+    if (pageURL.isEmpty())
-+        return;
-+
-     WebKitFaviconDatabasePrivate* priv = database->priv;
-     SetForScope<bool> change(priv->isSettingIcon, true);
-     priv->iconDatabase->setIconURLForPageURL(icon.url.string(), pageURL);
diff --git a/webkit2gtk3.changes b/webkit2gtk3.changes
index 8bbc482..f56a073 100644
--- a/webkit2gtk3.changes
+++ b/webkit2gtk3.changes
@@ -1,3 +1,21 @@
+-------------------------------------------------------------------
+Mon Jun 11 13:22:44 UTC 2018 - bjorn.lie@gmail.com
+
+- Update to version 2.20.3:
+  + Fix installation directory of API documentation.
+  + Disable Gigacage if mmap fails to allocate in Linux.
+  + Add user agent quirk for paypal website.
+  + Properly detect compiler flags, needed libs, and fallbacks for
+    usage of 64-bit atomic operations.
+  + Fix a network process crash when trying to get cookies of
+    about:blank page.
+  + Fix UI process crash when closing the window under Wayland.
+  + Fix several crashes and rendering issues.
+  + Security fixes: CVE-2018-4190, CVE-2018-4199, CVE-2018-4218,
+    CVE-2018-4222, CVE-2018-4232, CVE-2018-4233, CVE-2018-4246,
+    CVE-2018-11646.
+- Drop webkit2gtk3-boo1095611-null-page-url.patch: Fixed upstream.
+
 -------------------------------------------------------------------
 Fri Jun  8 20:49:13 UTC 2018 - mgorse@suse.com
 
diff --git a/webkit2gtk3.spec b/webkit2gtk3.spec
index 0aa3530..92f0168 100644
--- a/webkit2gtk3.spec
+++ b/webkit2gtk3.spec
@@ -38,7 +38,7 @@
 %endif
 %bcond_without python3
 Name:           webkit2gtk3
-Version:        2.20.2
+Version:        2.20.3
 Release:        0
 Summary:        Library for rendering web content, GTK+ Port
 License:        LGPL-2.0-or-later AND BSD-3-Clause
@@ -54,8 +54,7 @@ Patch0:         webkitgtk-typelib-sharelib-link.patch
 Patch1:         webkit2gtk3-python3.patch
 # PATCh-FIX-UPSTREAM webkit2gtk3-boo1088932-a11y-state-set.patch boo#1088932 webkit#184366 mgorse@suse.com -- fix crash when atk_object_ref_state_set is called on an AtkObject that's being destroyed.
 Patch2:         webkit2gtk3-boo1088932-a11y-state-set.patch
-# PATCH-FIX-UPSTREAM webkit2gtk3-boo1095611-null-page-url.patch boo#1095611 mgorse@suse.com -- fix crash if a page URL is null (CVE-2018-11646).
-Patch3:         webkit2gtk3-boo1095611-null-page-url.patch
+
 BuildRequires:  Mesa-libEGL-devel
 BuildRequires:  Mesa-libGL-devel
 BuildRequires:  Mesa-libGLESv1_CM-devel
@@ -265,7 +264,6 @@ invoking a Perl or Python script.
 %patch1 -p1
 %endif
 %patch2 -p1
-%patch3 -p1
 
 %build
 # Here we must muzzle our dog so it doesn't eat all the memory
diff --git a/webkitgtk-2.20.2.tar.xz b/webkitgtk-2.20.2.tar.xz
deleted file mode 100644
index d0802d1..0000000
--- a/webkitgtk-2.20.2.tar.xz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:dffe93a241f03f1c73b369f4e323e4d8f12e39d33d5515948cbf454ca4b526e2
-size 16622048
diff --git a/webkitgtk-2.20.2.tar.xz.asc b/webkitgtk-2.20.2.tar.xz.asc
deleted file mode 100644
index aa37c7e..0000000
--- a/webkitgtk-2.20.2.tar.xz.asc
+++ /dev/null
@@ -1,6 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iF0EABEDAB0WIQTX/PYc+aLeqzHYG9Pz0yLQ7EWCwwUCWvAxQgAKCRDz0yLQ7EWC
-w3JIAJ4iZ9PDs2leXLd1hezOr/TBB9kKLQCeJnvTy0M0r4/AxPYnD3UhHX+oqm0=
-=681+
------END PGP SIGNATURE-----
diff --git a/webkitgtk-2.20.3.tar.xz b/webkitgtk-2.20.3.tar.xz
new file mode 100644
index 0000000..85f03a0
--- /dev/null
+++ b/webkitgtk-2.20.3.tar.xz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:579b307d78fa16a73f112790178022166d7ad17d4147492ced9b9fba48f20dd8
+size 16623456
diff --git a/webkitgtk-2.20.3.tar.xz.asc b/webkitgtk-2.20.3.tar.xz.asc
new file mode 100644
index 0000000..1cec0f3
--- /dev/null
+++ b/webkitgtk-2.20.3.tar.xz.asc
@@ -0,0 +1,6 @@
+-----BEGIN PGP SIGNATURE-----
+
+iF0EABEDAB0WIQTX/PYc+aLeqzHYG9Pz0yLQ7EWCwwUCWx5nxQAKCRDz0yLQ7EWC
+w2jpAJ4/uSFTvyV6VLmwCxtYYrypMgzcjQCg4uppNbNwNYSp/bj+/r8+E+DrOsA=
+=HovV
+-----END PGP SIGNATURE-----