diff --git a/.gitignore b/.gitignore
index 7b825f4..ebfcb6f 100644
--- a/.gitignore
+++ b/.gitignore
@@ -23,3 +23,4 @@
 /aarch64-port-rc4.tar.xz
 /aarch64-port-jdk8-b128-aarch64-992.tar.xz
 /jdk8u-jdk8u5-b13.tar.xz
+/jdk8u-jdk8u11-b12.tar.xz
diff --git a/java-1.8.0-openjdk.spec b/java-1.8.0-openjdk.spec
index 70573b4..ef04f1e 100644
--- a/java-1.8.0-openjdk.spec
+++ b/java-1.8.0-openjdk.spec
@@ -89,8 +89,8 @@
 
 # Standard JPackage naming and versioning defines.
 %global origin          openjdk
-%global updatever       5
-%global buildver        b13
+%global updatever       11
+%global buildver        b12
 %global aarch64_updatever 0
 %global aarch64_buildver b128
 # priority must be 6 digits in total
@@ -135,7 +135,7 @@
 
 Name:    java-%{javaver}-%{origin}
 Version: %{javaver}.%{updatever}
-Release: 13.%{buildver}%{?dist}
+Release: 4.%{buildver}%{?dist}
 # java-1.5.0-ibm from jpackage.org set Epoch to 1 for unknown reasons,
 # and this change was brought into RHEL-4.  java-1.5.0-ibm packages
 # also included the epoch in their virtual provides.  This created a
@@ -1156,6 +1156,9 @@ exit 0
 %{_jvmdir}/%{jredir}/lib/accessibility.properties
 
 %changelog
+* Tue Jul 15 2014 Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-1.b12
+- updated to security u11b12
+
 * Tue Jun 24 2014 Omair Majid <omajid@redhat.com> - 1:1.8.0.5-13.b13
 - Obsolete java-1.7.0-openjdk
 
diff --git a/java-atk-wrapper-security.patch b/java-atk-wrapper-security.patch
index 8ef9a48..7d6f314 100644
--- a/java-atk-wrapper-security.patch
+++ b/java-atk-wrapper-security.patch
@@ -1,28 +1,25 @@
 --- jdk8/jdk/src/share/lib/security/java.security-linux.orig
 +++ jdk8/jdk/src/share/lib/security/java.security-linux
-@@ -154,9 +154,11 @@
-                org.jcp.xml.dsig.internal.,\
+@@ -211,7 +211,9 @@
                 jdk.internal.,\
                 jdk.nashorn.internal.,\
--               jdk.nashorn.tools.
-+               jdk.nashorn.tools,\
+                jdk.nashorn.tools.,\
+-               com.sun.activation.registries.
++               com.sun.activation.registries.,\
 +               org.GNOME.Accessibility.,\
 +               org.GNOME.Bonobo.
  
- 
  #
  # List of comma-separated packages that start with or equal this string
- # will cause a security exception to be thrown when
-@@ -192,9 +194,11 @@
-                    org.jcp.xml.dsig.internal.,\
+@@ -258,7 +260,9 @@
                     jdk.internal.,\
                     jdk.nashorn.internal.,\
--                   jdk.nashorn.tools.
-+                   jdk.nashorn.tools.,\
+                    jdk.nashorn.tools.,\
+-                   com.sun.activation.registries.
++                   com.sun.activation.registries.,\
 +                   org.GNOME.Accessibility.,\
 +                   org.GNOME.Bonobo.
  
- 
  #
  # Determines whether this properties file can be appended to
- # or overridden on the command line via -Djava.security.properties
+
diff --git a/sources b/sources
index ebf2fe3..70accbc 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-05eaf803e52ffeba351f3701556e5132  jdk8u-jdk8u5-b13.tar.xz
+84eed2615ebcf518ad92c88c280ede9e  jdk8u-jdk8u11-b12.tar.xz
 94ca5a45c3cb3b85c4577d0891166007  systemtap-tapset.tar.gz
 944bc1bc5b3a23ab7748bcf3230f5afc  aarch64-port-jdk8-b128-aarch64-992.tar.xz