diff --git a/devstack/settings b/devstack/settings
index 868bbaac2..d1007ee15 100644
--- a/devstack/settings
+++ b/devstack/settings
@@ -106,7 +106,7 @@ CASSANDRA_VERSION=${CASSANDRA_VERSION:-311x}
 BASE_KAFKA_VERSION=${BASE_KAFKA_VERSION:-0.9.0.1}
 SCALA_VERSION=${SCALA_VERSION:-2.11}
 KAFKA_VERSION=${KAFKA_VERSION:-${SCALA_VERSION}-${BASE_KAFKA_VERSION}}
-STORM_VERSION=${STORM_VERSION:-1.1.1}
+STORM_VERSION=${STORM_VERSION:-1.1.3}
 GO_VERSION=${GO_VERSION:-"1.7.1"}
 NODE_JS_VERSION=${NODE_JS_VERSION:-"4.0.0"}
 NVM_VERSION=${NVM_VERSION:-"0.32.1"}
diff --git a/releasenotes/notes/storm_1.1.3-4aa16a9c648cd89b.yaml b/releasenotes/notes/storm_1.1.3-4aa16a9c648cd89b.yaml
new file mode 100644
index 000000000..9f3ca1848
--- /dev/null
+++ b/releasenotes/notes/storm_1.1.3-4aa16a9c648cd89b.yaml
@@ -0,0 +1,5 @@
+---
+upgrade:
+  - |
+    Upgrade Storm to 1.1.3 from 1.1.1. It provides security fix for
+    http://www.securityfocus.com/bid/104399