diff --git a/.kernel.metadata b/.kernel.metadata
index 8a6627e..6882c08 100644
--- a/.kernel.metadata
+++ b/.kernel.metadata
@@ -1,3 +1,3 @@
 8d861248716a82a9ff7442c6150f5f9eccbb3243  SOURCES/kernel-abi-whitelists-4.18.0-240.tar.bz2
 59861274c73f8acc9a5c9da435ab98c09e54fac8  SOURCES/kernel-kabi-dw-4.18.0-240.tar.bz2
-e7437daa00fa8f06d91013db7a9d2d042bf93fc8  SOURCES/linux-4.18.0-240.el8.tar.xz
+692f8f751c9e55a5e157be6f2173ec06ccd0d22d  SOURCES/linux-4.18.0-240.1.1.el8_3.tar.xz
diff --git a/SPECS/kernel-plus.spec b/SPECS/kernel-plus.spec
index 021d4eb..0663cbc 100644
--- a/SPECS/kernel-plus.spec
+++ b/SPECS/kernel-plus.spec
@@ -43,10 +43,10 @@
 # define buildid .local
 
 %define rpmversion 4.18.0
-%define pkgrelease 240.el8
+%define pkgrelease 240.1.1.el8_3
 
 # allow pkg_release to have configurable %%{?dist} tag
-%define specrelease 240%{?dist}
+%define specrelease 240.1.1%{?dist}
 
 %define pkg_release %{specrelease}%{?buildid}
 
@@ -2676,7 +2676,7 @@ fi
 #
 
 %changelog
-* Sat Nov 14 2020 Akemi Yagi <toracat@centos.org> [4.18.0-240.el8.centos.plus]
+* Fri Nov 20 2020 Akemi Yagi <toracat@centos.org> [4.18.0-240.1.1.el8_3.centos.plus]
 - Apply debranding changes
 - Modify config file for x86_64 with extra features turned on including some network adapters,
   some SCSI adapters, ReiserFS, TOMOYO
@@ -2688,6 +2688,11 @@ fi
   when the system microcode package is updated [bug#17562]
 - wireguard added [bug#17652]
 
+* Fri Oct 16 2020 Frantisek Hrbata <fhrbata@redhat.com> [4.18.0-240.1.1.el8_3]
+- [net] Bluetooth: fix kernel oops in store_pending_adv_report (Gopal Tiwari) [1888454 1888455] {CVE-2020-24490}
+- [net] Bluetooth: L2CAP: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888257 1888258] {CVE-2020-12351}
+- [net] Bluetooth: A2MP: Fix not initializing all members (Gopal Tiwari) [1888806 1888807] {CVE-2020-12352}
+
 * Wed Sep 23 2020 Frantisek Hrbata <fhrbata@redhat.com> [4.18.0-240.el8]
 - [include] block: allow for_each_bvec to support zero len bvec (Ming Lei) [1872032]
 - [nvme] nvme-pci: disable the write zeros command for Intel 600P/P3100 (David Milburn) [1875391]