diff --git a/.gitignore b/.gitignore
index 3502da6..f2963ab 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1 +1 @@
-SOURCES/linux-4.18.0-147.0.2.rt24.94.el8_1.tar.xz
+SOURCES/linux-4.18.0-147.0.3.rt24.95.el8_1.tar.xz
diff --git a/.kernel-rt.metadata b/.kernel-rt.metadata
index 74094e1..5072adb 100644
--- a/.kernel-rt.metadata
+++ b/.kernel-rt.metadata
@@ -1 +1 @@
-655ea2c2cc5937f2bcdcf49b5010ce7a9737ed8d SOURCES/linux-4.18.0-147.0.2.rt24.94.el8_1.tar.xz
+6e36d163826cf65816d6a0ecdcc99271c5579403 SOURCES/linux-4.18.0-147.0.3.rt24.95.el8_1.tar.xz
diff --git a/SPECS/kernel-rt.spec b/SPECS/kernel-rt.spec
index 3dafeb3..c30bc2d 100644
--- a/SPECS/kernel-rt.spec
+++ b/SPECS/kernel-rt.spec
@@ -33,10 +33,10 @@ Summary: The Linux kernel
 # define buildid .local
 
 %define rpmversion 4.18.0
-%define pkgrelease 147.0.2.rt24.94.el8_1
+%define pkgrelease 147.0.3.rt24.95.el8_1
 
 # allow pkg_release to have configurable %%{?dist} tag
-%define specrelease 147.0.2.rt24.94%{?dist}
+%define specrelease 147.0.3.rt24.95%{?dist}
 
 %define pkg_release %{specrelease}%{?buildid}
 
@@ -125,7 +125,7 @@ Summary: The Linux kernel
 # The preempt RT patch level
 %global rttag .rt24
 # realtimeN
-%global rtbuild .94
+%global rtbuild .95
 %define with_headers 0
 %define with_cross_headers 0
 %define with_perf 0
@@ -2179,6 +2179,10 @@ fi
 #
 #
 %changelog
+* Mon Nov 11 2019 Juri Lelli <juri.lelli@redhat.com> [4.18.0-147.0.3.rt24.95.el8_1]
+- [rt] kernel-rt-4.18.0-147.0.3.rt24.94.el8_1 (Juri Lelli)
+- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
+
 * Mon Nov 04 2019 Juri Lelli <juri.lelli@redhat.com> [4.18.0-147.0.2.rt24.94.el8_1]
 - [rt] kernel-rt-4.18.0-147.0.2.rt24.93.el8_1 (Juri Lelli)
 - [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}