diff --git a/.gitignore b/.gitignore
index 1fdd7c7..27c9541 100644
--- a/.gitignore
+++ b/.gitignore
@@ -87,3 +87,4 @@ checkpolicy-2.0.22.tgz
 /checkpolicy-2.1.8.tgz
 /checkpolicy-2.1.9.tgz
 /checkpolicy-2.1.10.tgz
+/checkpolicy-2.1.11.tgz
diff --git a/checkpolicy.spec b/checkpolicy.spec
index 42a73f4..807796b 100644
--- a/checkpolicy.spec
+++ b/checkpolicy.spec
@@ -1,13 +1,12 @@
-%define libselinuxver 2.1.10-1
-%define libsepolver 2.1.7-4
+%define libselinuxver 2.1.11-1
+%define libsepolver 2.1.8-2
 Summary: SELinux policy compiler
 Name: checkpolicy
-Version: 2.1.10
-Release: 4%{?dist}
+Version: 2.1.11
+Release: 2%{?dist}
 License: GPLv2
 Group: Development/System
 Source: http://www.nsa.gov/selinux/archives/%{name}-%{version}.tgz
-Patch: checkpolicy-rhat.patch
 
 BuildRoot: %{_tmppath}/%{name}-buildroot
 BuildRequires: byacc bison flex flex-static libsepol-static >= %{libsepolver} libselinux-devel  >= %{libselinuxver} 
@@ -28,7 +27,6 @@ Only required for building policies.
 
 %prep
 %setup -q
-%patch -p2 -b .rhat
 
 %build
 make clean
@@ -56,6 +54,14 @@ rm -rf ${RPM_BUILD_ROOT}
 %{_bindir}/sedispol
 
 %changelog
+* Wed Sep 19 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.11-2
+- Rebuild with fixed libsepol
+
+* Thu Sep 13 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.11-1
+- Update to upstream 
+	* fd leak reading policy
+	* check return code on ebitmap_set_bit
+
 * Mon Jul 30 2012 Dan Walsh <dwalsh@redhat.com> - 2.1.10-4
 - Rebuild to grab latest libsepol
 
diff --git a/sources b/sources
index 2a25371..18afb94 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-31a46b32b14a467f90e79a4792cf29c6  checkpolicy-2.1.10.tgz
+a39eec39a84161f88b63ce405549e5b6  checkpolicy-2.1.11.tgz