diff --git a/.gitignore b/.gitignore
index f47daae..e9b779f 100644
--- a/.gitignore
+++ b/.gitignore
@@ -4,3 +4,4 @@ cyrus_sharedbackup-0.1.tar.gz
 /cyrus-imapd-2.4.7.tar.gz
 /cyrus-imapd-2.4.8.tar.gz
 /cyrus-imapd-2.4.10.tar.gz
+/cyrus-imapd-2.4.11.tar.gz
diff --git a/cyrus-imapd.spec b/cyrus-imapd.spec
index 7d486d6..ac49a60 100644
--- a/cyrus-imapd.spec
+++ b/cyrus-imapd.spec
@@ -1,6 +1,6 @@
 Name: cyrus-imapd
-Version: 2.4.10
-Release: 4%{?dist}
+Version: 2.4.11
+Release: 1%{?dist}
 
 %define ssl_pem_file %{_sysconfdir}/pki/%{name}/%{name}.pem
 
@@ -477,6 +477,10 @@ fi
 %{_mandir}/man1/*
 
 %changelog
+* Fri Sep  9 2011 Jeroen van Meeuwen <vanmeeuwen@kolabsys.com> - 2.4.11-1
+- update to 2.4.11
+- Fix CVE-2011-3208 (#734926, #736838)
+
 * Tue Aug 16 2011 Michal Hlavinka <mhlavink@redhat.com> - 2.4.10-4
 - rebuild with db5
 
diff --git a/sources b/sources
index cf7ef60..df2ffa8 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-55f08eeabf2f93281e61ba27854aea67  cyrus-imapd-2.4.10.tar.gz
+d4a066e979adbe85679a6e239d64ee74  cyrus-imapd-2.4.11.tar.gz