diff --git a/.gitignore b/.gitignore
index 708f805..3891490 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,3 +1,3 @@
-SOURCES/kernel-rt-3.10.0-327.36.1.rt56.237.tar.xz
+SOURCES/kernel-rt-3.10.0-327.36.3.rt56.238.tar.xz
 SOURCES/rheldup3.x509
 SOURCES/rhelkpatch1.x509
diff --git a/.kernel-rt.metadata b/.kernel-rt.metadata
index c540750..4204097 100644
--- a/.kernel-rt.metadata
+++ b/.kernel-rt.metadata
@@ -1,3 +1,3 @@
-4341fdfa6287857cc924bd87cfcc9f006263f54c SOURCES/kernel-rt-3.10.0-327.36.1.rt56.237.tar.xz
+56fcd3a53e17fb724126cc0ccabd83e8de68580f SOURCES/kernel-rt-3.10.0-327.36.3.rt56.238.tar.xz
 95b9b811c7b0a6c98b2eafc4e7d6d24f2cb63289 SOURCES/rheldup3.x509
 d90885108d225a234a5a9d054fc80893a5bd54d0 SOURCES/rhelkpatch1.x509
diff --git a/SPECS/kernel-rt.spec b/SPECS/kernel-rt.spec
index 5081ced..0559b3b 100644
--- a/SPECS/kernel-rt.spec
+++ b/SPECS/kernel-rt.spec
@@ -6,10 +6,10 @@ Summary: The Linux Realtime kernel
 %global __spec_install_pre %{___build_pre}
 
 # realtimeN
-%global rtbuild 237
+%global rtbuild 238
 
 # RHEL7 build number
-%global rhel_build 327.36.1
+%global rhel_build 327.36.3
 
 # The preempt RT patch lev2l
 %global rttag rt56
@@ -1488,6 +1488,11 @@ fi
 %endif
 
 %changelog
+* Thu Oct 20 2016 Luis Claudio R. Goncalves <lgoncalv@redhat.com> [3.10.0-327.36.3.rt56.238.el7]
+- [rt] kernel-3.10.0-327.36.3.el7 [1366538]
+- [mm] remove gup_flags FOLL_WRITE games from __get_user_pages() (Alexander Gordeev) [1385126] {CVE-2016-5195}
+- [net] add recursion limit to GRO (Sabrina Dubroca) {CVE-2016-7039}
+
 * Wed Aug 17 2016 Luis Claudio R. Goncalves <lgoncalv@redhat.com> [3.10.0-327.36.1.rt56.237.el7]
 - [rt] kernel-3.10.0-327.36.1.el7 [1366538]