diff --git a/.gitignore b/.gitignore
index e57cc89..e2dc466 100644
--- a/.gitignore
+++ b/.gitignore
@@ -53,3 +53,4 @@
 /go1.9.7.src.tar.gz
 /go1.11.1.src.tar.gz
 /go1.11.2.src.tar.gz
+/go1.11.4.src.tar.gz
diff --git a/golang.spec b/golang.spec
index 2b0bec5..262d096 100644
--- a/golang.spec
+++ b/golang.spec
@@ -99,11 +99,11 @@
 %endif
 
 %global go_api 1.11
-%global go_version 1.11.2
+%global go_version 1.11.4
 
 Name:           golang
-Version:        1.11.2
-Release:        3%{?dist}
+Version:        1.11.4
+Release:        1%{?dist}
 Summary:        The Go Programming Language
 # source tree includes several copies of Mark.Twain-Tom.Sawyer.txt under Public Domain
 License:        BSD and Public Domain
@@ -571,6 +571,11 @@ fi
 %endif
 
 %changelog
+* Tue Jan 08 2019 Jakub Čajka <jcajka@redhat.com> - 1.11.4-1
+- Rebase to go1.11.4
+- Fix for CVE-2018-16875, CVE-2018-16874 and CVE-2018-16873
+- Resolves: BZ#1664332
+
 * Fri Nov 30 2018 Jakub Čajka <jcajka@redhat.com> - 1.11.2-3
 - add ppc64le proper
 
diff --git a/sources b/sources
index b7858d3..fd855af 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (go1.11.2.src.tar.gz) = 3d9b182718c7615975a4b47cecb9ff2a8ce62156461e4112452c14617ea226121e7ab736a469050f14c89861cc4934ddd2df295b80fffff0a2dd6c155eaf0aee
+SHA512 (go1.11.4.src.tar.gz) = 9aa2e1800807841ec0432289b672c1607bdcb295f29c02d38adfaf1e3bf043040c9f916e4cb170875d92fe168c5ba6baef2b3d1f824a56ff9138ca2cdcc646e0