diff --git a/.gitignore b/.gitignore
index 90e2be2..891f1df 100644
--- a/.gitignore
+++ b/.gitignore
@@ -173,3 +173,5 @@ samba-3.6.0pre1.tar.gz
 /samba-4.11.0rc1.tar.asc
 /samba-4.11.0rc2.tar.xz
 /samba-4.11.0rc2.tar.asc
+/samba-4.11.0rc3.tar.xz
+/samba-4.11.0rc3.tar.asc
diff --git a/samba.spec b/samba.spec
index 8424826..f7e1a76 100644
--- a/samba.spec
+++ b/samba.spec
@@ -14,7 +14,7 @@
 %define tevent_version 0.10.0
 %define ldb_version 2.0.5
 # This should be rc1 or nil
-%define pre_release rc2
+%define pre_release rc3
 
 %if "x%{?pre_release}" != "x"
 %define samba_release 0.%{main_release}.%{pre_release}%{?dist}
@@ -3462,6 +3462,10 @@ fi
 %endif # with_clustering_support
 
 %changelog
+* Tue Sep 03 2019 Guenther Deschner <gdeschner@redhat.com> - 4.11.0rc3-2
+- Update to Samba 4.11.0rc3
+- resolves: #1746225, #1748308 - Security fixes for CVE-2019-10197
+
 * Tue Aug 27 2019 Guenther Deschner <gdeschner@redhat.com> - 4.11.0rc2-2
 - resolves: #1746014 - re-add pidl
 
diff --git a/sources b/sources
index 423a539..bcc26d1 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
-SHA512 (samba-4.11.0rc2.tar.xz) = bc91fa6d6de0af44a3f8e8438281c7d9e74e7fed981e65f7cd4e9f1ebbc11d25b1cab3dd22fd375f81d620d0f128b0c879028448bdb6a918cd89682a3f828ed8
-SHA512 (samba-4.11.0rc2.tar.asc) = 0472840871106f89e3695098a064004bbcab5e0950252ac41c613f4610a0239471dfa34bae452abf417496eaa3025afc35a28f449f28ba97f4c731e2b4e3390b
+SHA512 (samba-4.11.0rc3.tar.xz) = 75a68eb8e800e67d926abb49da9beaaf99af7064d4731348f05b5857a6b5a2a03e5c8790267491f1f7baec129e22634a9b04cd5d97d2c59f6ec8cef455eecb60
+SHA512 (samba-4.11.0rc3.tar.asc) = acc56ff0acbb95592867201957c6c179e59a619a15b5345868de21ba3c79c5163f576bcdfce2531112db32d67caaf44a42583900fca768ad0a9fc6dbddc9658e