diff --git a/.gitignore b/.gitignore
index 3fe1f0f..3ff2304 100644
--- a/.gitignore
+++ b/.gitignore
@@ -143,3 +143,5 @@ samba-3.6.0pre1.tar.gz
 /samba-4.9.1.tar.xz
 /samba-4.9.2.tar.xz
 /samba-4.9.2.tar.asc
+/samba-4.9.3.tar.xz
+/samba-4.9.3.tar.asc
diff --git a/samba.spec b/samba.spec
index 1556d04..d197f37 100644
--- a/samba.spec
+++ b/samba.spec
@@ -8,7 +8,7 @@
 
 %define main_release 0
 
-%define samba_version 4.9.2
+%define samba_version 4.9.3
 %define talloc_version 2.1.14
 %define tdb_version 1.3.16
 %define tevent_version 0.9.37
@@ -3838,6 +3838,15 @@ fi
 %endif # with_clustering_support
 
 %changelog
+* Tue Nov 27 2018 Guenther Deschner <gdeschner@redhat.com> - 4.9.3-0
+- Update to Samba 4.9.3
+- resolves: #1625449, #1654078 - Security fixes for CVE-2018-14629
+- resolves: #1642545, #1654082 - Security fixes for CVE-2018-16841
+- resolves: #1646377, #1654091 - Security fixes for CVE-2018-16851
+- resolves: #1646386, #1654092 - Security fixes for CVE-2018-16852
+- resolves: #1647246, #1654093 - Security fixes for CVE-2018-16853
+- resolves: #1649278, #1654095 - Security fixes for CVE-2018-16857
+
 * Thu Nov 08 2018 Guenther Deschner <gdeschner@redhat.com> - 4.9.2-0
 - Update to Samba 4.9.2
 
diff --git a/sources b/sources
index 7e7fa97..f8d670a 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
-SHA512 (samba-4.9.2.tar.xz) = 0b4ff4a0417e9612fd6046ba7e7b0fc82ffffe71a49824808401ab9f4580f258bd83d97942fe4e97ea05743debcd943c8afab1c3694eb5267497e71cdcb08045
-SHA512 (samba-4.9.2.tar.asc) = 93155bebba6fe69b924761c268647f980669cf5ec75673ed5eb281d5864836d326a804b6853de58f716f13ff27645a0384a61e98e7be94137d4f7dc09c917c3e
+SHA512 (samba-4.9.3.tar.xz) = 4c173f641cf2c777a2fac66b0e18f37cd0fcdba13f6a58be6f97ffbf122e33f16aefc19ba165aac111fa46a580578fb128ddb5a791fa1c9253e2c6400c417073
+SHA512 (samba-4.9.3.tar.asc) = 48a5768a72a03d68932bc224097d14639636fd6f2c22b092c7db8b7f037f055649416573eab9c7c4da18f30af0bfc09bcaa578e752c5a9fc094e7120928af069