diff --git a/samba-4.9.1+git.101.212e237d8ef.tar.bz2 b/samba-4.9.1+git.101.212e237d8ef.tar.bz2
deleted file mode 100644
index f528b15..0000000
--- a/samba-4.9.1+git.101.212e237d8ef.tar.bz2
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:73357a67a258ced862ce3dc27fd3eb1f8d054172e77e8e0bf902748547faf420
-size 24633114
diff --git a/samba-4.9.3+git.113.3f6a4cdc269.tar.bz2 b/samba-4.9.3+git.113.3f6a4cdc269.tar.bz2
new file mode 100644
index 0000000..f234a7d
--- /dev/null
+++ b/samba-4.9.3+git.113.3f6a4cdc269.tar.bz2
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:a313fad76b8ecb98b5169427c920aa0f79033525327c837bc3b11c3ac5e1110f
+size 24650354
diff --git a/samba.changes b/samba.changes
index c88fd09..c3fbc0d 100644
--- a/samba.changes
+++ b/samba.changes
@@ -1,3 +1,58 @@
+-------------------------------------------------------------------
+Mon Nov 19 12:28:56 UTC 2018 - Samuel Cabrero <scabrero@suse.de>
+
+- Update to samba-4.9.3
+  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
+    Internal DNS server; (bso#13600); (bsc#1116319);
+  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
+    (bsc#1116320);
+  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
+    (bso#13674); (bsc#1116322);
+  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
+    (bso#13669); (bsc#1116321);
+  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
+    configuration (unsupported); (bso#13678); (bsc#1116324);
+  + CVE-2018-16857: Bad password count in AD DC not always effective;
+    window; (bso#13683); (bsc#1116323);
+
+-------------------------------------------------------------------
+Thu Nov  8 15:06:37 UTC 2018 - Samuel Cabrero <scabrero@suse.de>
+
+- Update to samba-4.9.2
+  + dsdb: Add comments explaining the limitations of our current backlink
+    behaviour; (bso#13418);
+  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
+  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
+    (bso#13465);
+  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
+  + File saving issues with vfs_fruit on samba >= 4.8.5; (bso#13646);
+  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
+  + Cancelling of SMB2 aio reads and writes returns wrong error
+    NT_STATUS_INTERNAL_ERROR; (bso#13667);
+  + Fix CTDB recovery record resurrection from inactive nodes and simplify
+    vacuuming; (bso#13641);
+  + examples: Fix the smb2mount build; (bso#13465);
+  + libtevent: Fix build due to missing open_memstream on Illiumos;
+    (bso#13629);
+  + winbindd_cache: Fix timeout calculation for sid<->name cache; (bso#13662);
+  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
+    (bso#13653);
+  + Extended DN SID component missing for member after switching group
+    membership; (bso#13418);
+  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
+    encrypted; (bso#13624);
+  + python: Allow forced signing via smb.SMB(); (bso#13621);
+  + lib:socket: If returning early, set ifaces; (bso#13665);
+  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
+    encoded unicode; (bso#13616);
+  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
+    (bso#13673);
+  + waf: Add -fstack-clash-protection; (bso#13601);
+  + winbind: Fix segfault if an invalid passdb backend is configured;
+    (bso#13668);
+  + Fix bugs in CTDB event handling; (bso#13659);
+  + Misbehaving nodes are sometimes not banned; (bso#13670);
+
 -------------------------------------------------------------------
 Mon Oct 29 14:38:56 UTC 2018 - dmulder@suse.com
 
diff --git a/samba.spec b/samba.spec
index b87632c..ff00b8c 100644
--- a/samba.spec
+++ b/samba.spec
@@ -52,7 +52,7 @@
 %define talloc_version 2.1.10
 %define tevent_version 0.9.34
 %define tdb_version    1.3.15
-%define ldb_version    1.4.2
+%define ldb_version    1.4.3
 
 %global with_mitkrb5 1
 %global with_dc 0
@@ -168,7 +168,7 @@ BuildRequires:  krb5-devel
 %else
 %define	build_make_smp_mflags %{?jobs:-j%jobs}
 %endif
-Version:        4.9.1+git.101.212e237d8ef
+Version:        4.9.3+git.113.3f6a4cdc269
 Release:        0
 Url:            https://www.samba.org/
 Obsoletes:      samba-32bit < %{version}
@@ -1049,6 +1049,10 @@ CONFIGURE_OPTIONS="\
 	--without-ad-dc \
 	--without-json-audit \
 	--without-gpgme \
+%else
+%if %{with_mitkrb5}
+	--with-experimental-mit-ad-dc \
+%endif
 %endif
 %if ! %{with_python}
 	--disable-python \
@@ -1894,6 +1898,7 @@ exit 0
 %{_libdir}/samba/libcli-spoolss-samba4.so
 %{_libdir}/samba/libcliauth-samba4.so
 %{_libdir}/samba/libcluster-samba4.so
+%{_libdir}/samba/libcmdline-contexts-samba4.so
 %{_libdir}/samba/libcmdline-credentials-samba4.so
 %{_libdir}/samba/libdbwrap-samba4.so
 %{_libdir}/samba/libdcerpc-samba-samba4.so
@@ -1933,6 +1938,7 @@ exit 0
 %{_libdir}/samba/libnon-posix-acls-samba4.so
 %{_libdir}/samba/libnpa-tstream-samba4.so
 %{_libdir}/samba/libnss-info-samba4.so
+%{_libdir}/samba/libpopt-samba3-cmdline-samba4.so
 %{_libdir}/samba/libpopt-samba3-samba4.so
 %{_libdir}/samba/libposix-eadb-samba4.so
 %{_libdir}/samba/libprinting-migrate-samba4.so