diff --git a/.gitignore b/.gitignore
index 79e7af2..e266d7f 100644
--- a/.gitignore
+++ b/.gitignore
@@ -87,3 +87,4 @@
 /node-v8.10.0-stripped.tar.gz
 /node-v8.11.0-stripped.tar.gz
 /node-v8.11.2-stripped.tar.gz
+/node-v8.11.3-stripped.tar.gz
diff --git a/nodejs.spec b/nodejs.spec
index 07ebe29..6c622d2 100644
--- a/nodejs.spec
+++ b/nodejs.spec
@@ -15,10 +15,10 @@
 %global nodejs_epoch 1
 %global nodejs_major 8
 %global nodejs_minor 11
-%global nodejs_patch 2
+%global nodejs_patch 3
 %global nodejs_abi %{nodejs_major}.%{nodejs_minor}
 %global nodejs_version %{nodejs_major}.%{nodejs_minor}.%{nodejs_patch}
-%global nodejs_release 2
+%global nodejs_release 1
 
 # == Bundled Dependency Versions ==
 # v8 - from deps/v8/include/v8-version.h
@@ -56,7 +56,7 @@
 
 # nghttp2 - from deps/nghttp2/lib/includes/nghttp2/nghttp2ver.h
 %global nghttp2_major 1
-%global nghttp2_minor 29
+%global nghttp2_minor 32
 %global nghttp2_patch 0
 %global nghttp2_version %{nghttp2_major}.%{nghttp2_minor}.%{nghttp2_patch}
 
@@ -490,6 +490,10 @@ NODE_PATH=%{buildroot}%{_prefix}/lib/node_modules %{buildroot}/%{_bindir}/node -
 %{_pkgdocdir}/npm/doc
 
 %changelog
+* Thu Jun 14 2018 Stephen Gallagher <sgallagh@redhat.com> - 1:8.11.3-1
+- Update to 8.11.3 for security fixes
+- https://nodejs.org/en/blog/release/v8.11.3/
+
 * Mon Jun 04 2018 Stephen Gallagher <sgallagh@redhat.com> - 1:8.11.2-2
 - Build against OpenSSL 1.1
 
diff --git a/sources b/sources
index c92dc6f..eac00d0 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (node-v8.11.2-stripped.tar.gz) = ede88661ef795f01b4824cb479085f16f47d7e03973d90803b57d88cff20c05a5e08f76e00d33ed7611f2085e812b2088fe65d1f046d5ef212f4aa4cb8389b62
+SHA512 (node-v8.11.3-stripped.tar.gz) = 17e0ceb71d9e8d6ab3ce211ae6034014baf66a751e9dc093d2baf487822524dc48a919db56ddbbcdcd1521071b4d416a24057854d0e881a6e91d3ae9c58cd918