diff --git a/.gitignore b/.gitignore
index 71d2ad2..2e0ede5 100644
--- a/.gitignore
+++ b/.gitignore
@@ -2,3 +2,5 @@
 /heimdal-7195232-autoconf.tar.gz
 /heimdal-7.3.0-40d4229.tar.gz
 /heimdal-40d4229-autoconf.tar.gz
+/heimdal-7.4.0-a3d72c6.tar.gz
+/heimdal-a3d72c6-autoconf.tar.gz
diff --git a/heimdal-generate-autoconf-tarball b/heimdal-generate-autoconf-tarball
index 48a3a77..2a85ecd 100755
--- a/heimdal-generate-autoconf-tarball
+++ b/heimdal-generate-autoconf-tarball
@@ -4,7 +4,7 @@
 # It's useful to pregenerate this data before building in mock, because
 # GNU autoconf on RHEL 5 is too old to parse the autoconf syntax in Heimdal.
 
-COMMIT=40d4229585ec17a9c051605aad7dd5d9e8831256
+COMMIT=a3d72c604378e0bff787cc426f2b17f75b112dce
 SHORT_COMMIT=${COMMIT:0:7}
 
 set -e
diff --git a/heimdal.spec b/heimdal.spec
index 69189ce..53c1d50 100644
--- a/heimdal.spec
+++ b/heimdal.spec
@@ -2,8 +2,8 @@
 %global libdir %{_libdir}/heimdal
 %global bindir %{_exec_prefix}/lib/heimdal
 
-%global commitdate 20170411
-%global commit 40d4229585ec17a9c051605aad7dd5d9e8831256
+%global commitdate 20170711
+%global commit a3d72c604378e0bff787cc426f2b17f75b112dce
 %global shortcommit %(c=%{commit}; echo ${c:0:7})
 %if 0%{?el5}
 %global need_autogen 0
@@ -17,7 +17,7 @@
 %endif
 
 Name: heimdal
-Version: 7.3.0
+Version: 7.4.0
 Release: 1%{?dist}
 Summary: A Kerberos 5 implementation without export restrictions
 License: BSD and MIT
@@ -561,6 +561,9 @@ fi
 %{_sysconfdir}/profile.d/%{name}.csh
 
 %changelog
+* Tue Jul 11 2017 Ken Dreyer <ktdreyer@ktdreyer.com> - 7.4.0-1
+- Update to 7.3.0 GA release (CVE-2017-11103)
+
 * Mon Apr 17 2017 Ken Dreyer <ktdreyer@ktdreyer.com> - 7.3.0-1
 - Update to 7.3.0 GA release (CVE-2017-6594)
 
diff --git a/sources b/sources
index d3ccff4..8cfdb0e 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
-SHA512 (heimdal-7.3.0-40d4229.tar.gz) = 3ca1ce91abbc2bed164d19a3c1a23a7b9a788acd4ae6a686e9512343f23ddac0b6f1c0f39dbeec70cb677580c7bbdfca50727e892039a97611878afdf91801aa
-SHA512 (heimdal-40d4229-autoconf.tar.gz) = 6fbc11e4a1b5c802647dc3507fe61bd0f531ef5b20c95db86e8b2cfd66a81dfd33177027b575457f7a98361b44c5fb8265c126e9926ceeaf2ff29db238103a95
+SHA512 (heimdal-7.4.0-a3d72c6.tar.gz) = fe96fbd44fb5974ca79ed56945c41f95882573147e31211bc71321cc20bb1355f8936101c7c3744029ddee770d30e844153c9d0de3b498d7d10d1d523891a776
+SHA512 (heimdal-a3d72c6-autoconf.tar.gz) = 925add697a24de027fbccad87c8e1eba120766bae9844f776e6168edb3c8d03b97615845abb606f473b8573b0dff888fdc07dc6a35dd4d73997c00a0fe2e7e5c