diff --git a/.gitignore b/.gitignore
index 3add2bb..8061ead 100644
--- a/.gitignore
+++ b/.gitignore
@@ -61,3 +61,4 @@
 /shenandoah-jdk11-shenandoah-jdk-11.0.8+10-4curve.tar.xz
 /shenandoah-jdk11-shenandoah-jdk-11.0.9+1-4curve.tar.xz
 /jdk-updates-jdk11u-jdk-11.0.9+2-4curve.tar.xz
+/jdk-updates-jdk11u-jdk-11.0.9+3-4curve.tar.xz
diff --git a/java-11-openjdk.spec b/java-11-openjdk.spec
index ef7fb13..e6848fb 100644
--- a/java-11-openjdk.spec
+++ b/java-11-openjdk.spec
@@ -258,7 +258,7 @@
 %global origin_nice     OpenJDK
 %global top_level_dir_name   %{origin}
 %global minorver        0
-%global buildver        2
+%global buildver        3
 %global rpmrelease      0
 #%%global tagsuffix      ""
 # priority must be 8 digits in total; untill openjdk 1.8 we were using 18..... so when moving to 11 we had to add another digit
@@ -1962,6 +1962,9 @@ require "copy_jdk_configs.lua"
 
 
 %changelog
+* Wed Aug 19 2020 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.3-0.0.ea
+- Update to jdk-11.0.9+3 (EA)
+
 * Tue Aug 11 2020 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.2-0.0.ea
 - Update to jdk-11.0.9+2 (EA)
 - With Shenandoah now upstream in OpenJDK 11, we can use jdk-updates/jdk11 directly
diff --git a/sources b/sources
index 2dcd95c..0d273ed 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
 SHA512 (tapsets-icedtea-3.15.0.tar.xz) = c752a197cb3d812d50c35e11e4722772be40096c81d2a57933e0d9b8a3c708b9c157b8108a4e33a06ca7bb81648170994408c75d6f69d5ff12785d0c31009671
-SHA512 (jdk-updates-jdk11u-jdk-11.0.9+2-4curve.tar.xz) = 5a9fb6c67c517a6afff840d7a334ce83bdd2bf36c9d3341ea44f0e902d07f134737d3f9dbf3c56e6d4d7258de5814aae7f9dde573698916924476ce215c4b0b9
+SHA512 (jdk-updates-jdk11u-jdk-11.0.9+3-4curve.tar.xz) = 60078b367edac17bfa0c27f521c152d15c2defe02245e2dc120a1f9bc04c93a47bc8a1365912dfe13f6e2a41503da7f546c5e03491c4099d2a2844ce81180f00