diff --git a/Makefile b/Makefile
index 372bf2aca..2aa7195c8 100644
--- a/Makefile
+++ b/Makefile
@@ -1,10 +1,10 @@
 ROOT=.
 
 # the latest stable version is:
-STABLE= 8.11.0
-RELDATE = "2024-11-06"
+STABLE= 8.11.1
+RELDATE = "2024-12-11"
 # The planned *next* release is:
-NEXTDATE = "2024-12-11"
+NEXTDATE = "2025-02-05"
 
 # generated file with binary package stats
 STAT = packstat.t
diff --git a/_changes.html b/_changes.html
index 682c1fbb7..1b377f0d4 100644
--- a/_changes.html
+++ b/_changes.html
@@ -47,6 +47,92 @@
 <a name="changes"></a>
 TITLE(All changes ever made)
 
+<a name="8_11_1"></a>
+SUBTITLE(Fixed in 8.11.1 - December 11 2024)
+VULNBOX(8.11.1)
+<p> Bugfixes:
+<ul class="bugfixes">
+ BGF <a href="https://curl.se/bug/?i=15648">build: fix ECH to always enable HTTPS RR</a>
+ BGF <a href="https://curl.se/bug/?i=15657">build: fix MSVC UWP builds</a>
+ BGF <a href="https://curl.se/bug/?i=15469">build: omit certain deps from `libcurl.pc` unless found via `pkg-config`</a>
+ BGF <a href="https://curl.se/bug/?i=15525">build: use `_fseeki64()` on Windows, drop detections</a>
+ BGF <a href="https://curl.se/bug/?i=15617">cmake: do not echo most inherited `LDFLAGS` to config files</a>
+ BGF <a href="https://curl.se/bug/?i=15501">cmake: drop cmake args list from `buildinfo.txt`</a>
+ BGF <a href="https://curl.se/bug/?i=15620">cmake: include `wolfssl/options.h` first</a>
+ BGF <a href="https://curl.se/bug/?i=15661">cmake: remove legacy unused IMMEDIATE keyword</a>
+ BGF <a href="https://curl.se/bug/?i=15563">cmake: restore cmake args list in `buildinfo.txt`</a>
+ BGF <a href="https://curl.se/bug/?i=15695">cmake: set `CURL_STATICLIB` for static lib when `SHARE_LIB_OBJECT=OFF`</a>
+ BGF <a href="https://curl.se/bug/?i=15545">cmake: sync GSS config code with other deps</a>
+ BGF cmake: typo in comment
+ BGF <a href="https://curl.se/bug/?i=15557">cmake: work around `ios.toolchain.cmake` breaking feature-detections</a>
+ BGF <a href="https://curl.se/bug/?i=15565">cmakelint: fix to check root `CMakeLists.txt`</a>
+ BGF <a href="https://curl.se/bug/?i=15506">cmdline/ech.md: formatting cleanups</a>
+ BGF configure: add FIXMEs for disabled pkg-config references
+ BGF <a href="https://curl.se/bug/?i=15533">configure: do not echo most inherited `LDFLAGS` to config files</a>
+ BGF <a href="https://curl.se/bug/?i=15584">configure: replace `$#` shell syntax</a>
+ BGF <a href="https://curl.se/bug/?i=15492">cookie: treat cookie name case sensitively</a>
+ BGF <a href="https://curl.se/bug/?i=15546">curl-rustls.m4: keep existing `CPPFLAGS`/`LDFLAGS` when detected</a>
+ BGF <a href="https://curl.se/bug/?i=15538">curl.h: mark two error codes as obsolete</a>
+ BGF <a href="https://curl.se/bug/?i=15645">curl: --continue-at is mutually exclusive with --no-clobber</a>
+ BGF <a href="https://curl.se/bug/?i=15646">curl: --continue-at is mutually exclusive with --range</a>
+ BGF <a href="https://curl.se/bug/?i=15645">curl: --continue-at is mutually exclusive with --remove-on-error</a>
+ BGF <a href="https://curl.se/bug/?i=15504">curl: --test-duphandle in debug builds runs &quot;duphandled&quot;</a>
+ BGF <a href="https://curl.se/bug/?i=15680">curl: do more command line parsing in sub functions</a>
+ BGF <a href="https://curl.se/bug/?i=15580">curl: rename struct var to fix AIX build</a>
+ BGF <a href="https://curl.se/bug/?i=15614">curl: use realtime in trace timestamps</a>
+ BGF <a href="https://curl.se/mail/lib-2024-11/0029.html">curl_multi_socket_all.md: soften the deprecation warning</a>
+ BGF <a href="https://curl.se/bug/?i=15542">CURLOPT_PREREQFUNCTION.md: add result code on failure</a>
+ BGF <a href="https://curl.se/bug/?i=15653">digest: produce a shorter cnonce in Digest headers</a>
+ BGF DISTROS: update Alt Linux links
+ BGF <a href="https://curl.se/bug/?i=15689">dmaketgz: use --no-cache when building docker image</a>
+ BGF <a href="https://curl.se/bug/?i=15705">docs: bring back ALTSVC.md and HSTS.md</a>
+ BGF <a href="https://curl.se/bug/?i=15608">docs: document default `User-Agent`</a>
+ BGF <a href="https://curl.se/bug/?i=15658">docs: suggest --ssl-reqd instead of --ftp-ssl</a>
+ BGF <a href="https://curl.se/bug/?i=15496">duphandle: also init netrc</a>
+ BGF <a href="https://curl.se/bug/?i=15499">ECH: enable support for the AWS-LC backend</a>
+ BGF <a href="https://curl.se/bug/?i=15676">hostip: don&apos;t use the resolver for FQDN localhost</a>
+ BGF <a href="https://curl.se/bug/?i=15685">http_negotiate: allow for a one byte larger channel binding buffer</a>
+ BGF <a href="https://curl.se/bug/?i=15672">http_proxy: move dynhds_add_custom here from http.c</a>
+ BGF <a href="https://curl.se/bug/?i=15472">KNOWN_BUGS: setting a disabled option should return CURLE_NOT_BUILT_IN</a>
+ BGF <a href="https://curl.se/bug/?i=15585">krb5: fix socket/sockindex confusion, MSVC compiler warnings</a>
+ BGF <a href="https://curl.se/bug/?i=15650">lib: fixes for wolfSSL OPENSSL_COEXIST</a>
+ BGF <a href="https://curl.se/bug/?i=15625">libssh: use libssh sftp_aio to upload file</a>
+ BGF <a href="https://curl.se/bug/?i=15522">libssh: when using IPv6 numerical address, add brackets</a>
+ BGF <a href="https://curl.se/bug/?i=15508">macos: disable gcc `availability` workaround as needed</a>
+ BGF <a href="https://curl.se/bug/?i=15500">mbedtls: call psa_crypt_init() in global init</a>
+ BGF <a href="https://curl.se/bug/?i=15688">mime: fix reader stall on small read lengths</a>
+ BGF <a href="https://curl.se/bug/?i=15547">mk-ca-bundle: remove CKA_NSS_SERVER_DISTRUST_AFTER conditions</a>
+ BGF <a href="https://curl.se/bug/?i=15699">mprintf: fix the integer overflow checks</a>
+ BGF <a href="https://curl.se/bug/?i=15600">multi: add clarifying comment for wakeup_write()</a>
+ BGF <a href="https://curl.se/bug/?i=15627">multi: fix callback for `CURLMOPT_TIMERFUNCTION` not being called again when...</a>
+ BGF <a href="https://curl.se/bug/?i=15586">netrc: address several netrc parser flaws</a>
+ BGF <a href="https://curl.se/bug/?i=15513">netrc: support large file, longer lines, longer tokens</a>
+ BGF <a href="https://curl.se/bug/?i=15527">nghttp2: use custom memory functions</a>
+ BGF <a href="https://curl.se/bug/?i=15612">OpenSSL: improvde error message on expired certificate</a>
+ BGF <a href="https://curl.se/bug/?i=15679">openssl: remove three &quot;Useless Assignments&quot;</a>
+ BGF <a href="https://curl.se/bug/?i=15673">openssl: stop using SSL_CTX_ function prefix for our functions</a>
+ BGF <a href="https://curl.se/bug/?i=15566">os400: Fix IBMi builds</a>
+ BGF <a href="https://curl.se/bug/?i=15570">os400: Fix IBMi EBCDIC conversion of arguments</a>
+ BGF <a href="https://curl.se/bug/?i=15494">pytest: add test for use of CURLMOPT_MAX_HOST_CONNECTIONS</a>
+ BGF <a href="https://curl.se/bug/?i=15624">rtsp: check EOS in the RTSP receive and return an error code</a>
+ BGF <a href="https://hackerone.com/reports/2792484">schannel: remove TLS 1.3 ciphersuite-list support</a>
+ BGF <a href="https://curl.se/bug/?i=15511">setopt: fix CURLOPT_HTTP_CONTENT_DECODING</a>
+ BGF <a href="https://curl.se/bug/?i=15634">setopt: fix missing options for builds without HTTP & MQTT</a>
+ BGF <a href="https://curl.se/bug/?i=15605">show-headers.md: clarify the headers are saved with the data</a>
+ BGF <a href="https://curl.se/bug/?i=15553">socket: handle binding to &quot;host!&lt;ip&gt;&quot;</a>
+ BGF <a href="https://curl.se/bug/?i=15561">socketpair: fix enabling `USE_EVENTFD`</a>
+ BGF <a href="https://curl.se/bug/?i=15549">strtok: use namespaced `strtok_r` macro instead of redefining it</a>
+ BGF tests: add the ending time stamp in testcurl.pl
+ BGF <a href="https://curl.se/bug/?i=15644">tests: re-enable 2086, and 472, 1299, 1613 for Windows</a>
+ BGF <a href="https://curl.se/bug/?i=15483">TODO: consider OCSP stapling by default</a>
+ BGF <a href="https://curl.se/bug/?i=15683">tool_formparse: remove use of sscanf()</a>
+ BGF <a href="https://curl.se/bug/?i=15681">tool_getparam: parse --localport without using sscanf</a>
+ BGF <a href="https://curl.se/bug/?i=15638">tool_getpass: fix UWP `-Wnull-dereference`</a>
+ BGF <a href="https://curl.se/bug/?i=15642">tool_getpass: replace `getch()` call with `_getch()` on Windows</a>
+ BGF <a href="https://curl.se/bug/?i=15682">tool_urlglob: parse character globbing range without sscanf</a>
+ BGF <a href="https://curl.se/bug/?i=15515">vtls: fix compile warning when ALPN is not available</a>
+</ul>
+
 <a name="8_11_0"></a>
 SUBTITLE(Fixed in 8.11.0 - November 6 2024)
 RELEASEVIDEO(8.11.0, "https://youtu.be/C9SSeavI1NE")
diff --git a/_newslog.html b/_newslog.html
index a976fb434..50a77a6cd 100644
--- a/_newslog.html
+++ b/_newslog.html
@@ -34,6 +34,20 @@
  NCOLE
 #endif
 
+NSUBJ(curl and libcurl 8.11.1)
+NDATE(December 11 2024)
+NCOLS
+
+The curl team proudly presents curl and
+libcurl <a href="download.html">version 8.11.1</a>. See the
+full <a href="/ch/8.11.1.html">changelog</a>.
+
+<p>
+Pay special attention to the <a href="/docs/security.html">security
+vulnerability</a> fixed in this version.
+
+NCOLE
+
 NSUBJ(curl and libcurl 8.11.0)
 NDATE(November 6 2024)
 NCOLS