diff --git a/roundcubemail-1.4.10-complete.tar.gz b/roundcubemail-1.4.10-complete.tar.gz
deleted file mode 100644
index 650853b..0000000
--- a/roundcubemail-1.4.10-complete.tar.gz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:a3d8c0dc4db70188f4aea3b62c1bd8b0b31b0c0f77f77138c0715e9d6ddd520f
-size 7043181
diff --git a/roundcubemail-1.4.10-complete.tar.gz.asc b/roundcubemail-1.4.10-complete.tar.gz.asc
deleted file mode 100644
index 4a83334..0000000
--- a/roundcubemail-1.4.10-complete.tar.gz.asc
+++ /dev/null
@@ -1,17 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iQJHBAABCAAxFiEEiXDjemmK93XYfVkNwpRqlgnNVrQFAl/pA3MTHGRldnNAcm91
-bmRjdWJlLm5ldAAKCRDClGqWCc1WtCdFD/9xYhvIgnbToR1tZiZ2a/caYBZqWmhN
-Yh4FJRFcnv1BG4tRa+LPXINgA6jYPhH1AzpfniFRWzGKsTH0mWCgZq09ofwpVKtY
-Uo4Fw1csUe5PPTq8ldfbDw5PeRXyDnSWquSZlSofWJDHzwZKT7Jsqh94LWD08tl/
-RLZQAb4cM+98du5gQckgeIllFf8NTnZ401vMYnTss+VrcVAOFu+1TRr0yWtZqiAK
-BXhRnISq+bxUnISI7gDfWQDWRJvXa7Tb7oyZm4vCpfiPFCQK24QtTOCz2nKzwDOV
-n0aEhaubSDuKjI5awNI5DxnImLYQwSHhtML7lIv99aJcU5lDq2r/eDCz+tOgJaZH
-n/+d3h/yeosgOUmRgoUzr43Pgqnu6OQytViEdu5Ci8i3mbJijJaJHfBqNOEof6co
-W1ZFG64EcqjCXVvNqIMreU7+LU8YeMwK721H8nIlCtFmkm/X+HzrAa3FiSUwtgM9
-6iDeXSTiIIDLB9GnkCNlJq0pMG+jp2bXoxwoaNF5ngUuubFLoCy+ABbclM/w8W1u
-+GF8PDUkdMReItWhD7aH2baFvzVP4c6ZWX6flucJeAbaGhEKf23MCCA2hOeJQSku
-H4dtDocj6UTCSYKAITrYnEyToS/n2VrCbtfF5I1XyMo+BqvXC39hYhhwHTYiexzl
-ClFINuUO3RUqKw==
-=eeV7
------END PGP SIGNATURE-----
diff --git a/roundcubemail-1.4.11-complete.tar.gz b/roundcubemail-1.4.11-complete.tar.gz
new file mode 100644
index 0000000..4b2e987
--- /dev/null
+++ b/roundcubemail-1.4.11-complete.tar.gz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:ac7319070c305fc2c88c7723605562d8607030732beee931cdb4091cf05e69b7
+size 7048262
diff --git a/roundcubemail-1.4.11-complete.tar.gz.asc b/roundcubemail-1.4.11-complete.tar.gz.asc
new file mode 100644
index 0000000..8fdd3fb
--- /dev/null
+++ b/roundcubemail-1.4.11-complete.tar.gz.asc
@@ -0,0 +1,17 @@
+-----BEGIN PGP SIGNATURE-----
+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+=OWNZ
+-----END PGP SIGNATURE-----
diff --git a/roundcubemail.changes b/roundcubemail.changes
index 43632f9..046ff08 100644
--- a/roundcubemail.changes
+++ b/roundcubemail.changes
@@ -1,3 +1,9 @@
+-------------------------------------------------------------------
+Mon Feb  8 21:26:29 UTC 2021 - Michael Ströder <michael@stroeder.com>
+
+- update to 1.4.11 with security fix:
+  Fix cross-site scripting (XSS) via HTML messages with malicious CSS content
+
 -------------------------------------------------------------------
 Fri Jan 22 17:46:59 UTC 2021 - Arjen de Korte <suse+build@de-korte.org>
 
diff --git a/roundcubemail.spec b/roundcubemail.spec
index 7c9a661..f5be854 100644
--- a/roundcubemail.spec
+++ b/roundcubemail.spec
@@ -20,7 +20,7 @@
 %define roundcubeconfigpath %{_sysconfdir}/%{name}
 %define php_name      %(php -r "print 'php' . PHP_MAJOR_VERSION;")
 Name:           roundcubemail
-Version:        1.4.10
+Version:        1.4.11
 Release:        0
 Summary:        A browser-based multilingual IMAP client
 License:        GPL-3.0-or-later AND GPL-2.0-only AND BSD-3-Clause