diff --git a/.gitignore b/.gitignore
index 0876895..a611a91 100644
--- a/.gitignore
+++ b/.gitignore
@@ -172,3 +172,4 @@
 /389-ds-base-1.4.0.17.tar.bz2
 /389-ds-base-1.4.0.18.tar.bz2
 /389-ds-base-1.4.0.19.tar.bz2
+/389-ds-base-1.4.0.20.tar.bz2
diff --git a/389-ds-base.spec b/389-ds-base.spec
index 305656d..1bb7990 100644
--- a/389-ds-base.spec
+++ b/389-ds-base.spec
@@ -44,7 +44,7 @@ ExcludeArch: i686
 
 Summary:          389 Directory Server (base)
 Name:             389-ds-base
-Version:          1.4.0.19
+Version:          1.4.0.20
 Release:          %{?relprefix}1%{?prerel}%{?dist}
 License:          GPLv3+
 URL:              https://www.port389.org
@@ -772,6 +772,35 @@ exit 0
 %doc README.md
 
 %changelog
+* Fri Dec 14 2018 Mark Reynolds <mreynolds@redhat.com> - 1.4.0.20-1
+- Bump version to 1.4.0.20
+- Ticket 49994 - Add test for backend/suffix CLI functions
+- Ticket 50090 - refactor fetch_attr() to slapi_fetch_attr()
+- Ticket 50091 - shadowWarning is not generated if passwordWarning is lower than 86400 seconds (1 day)
+- Ticket 50056 - Fix CLI/UI bugs
+- Ticket 49864 - Revised replication status messages for transient errors
+- Ticket 50071 - Set ports in local_simple_allocate function
+- Ticket 50065 - lib389 aci parsing is too strict
+- Ticket 50061 - Improve schema loading in UI
+- Ticket 50063 - Crash after attempting to restore a single backend
+- Ticket 50062 - Replace error by warning in the state machine defined in repl5_inc_run
+- Ticket 50041 - Set the React dataflow foundation and add basic plugin UI
+- Ticket 50028 - Revise ds-replcheck usage
+- TIcket 50057 - Pass argument into hashtable_new
+- Ticket 50053 - improve testcase
+- Ticket 50053 - Subtree password policy overrides a user-defined password policy
+- Ticket 49974 - lib389 - List instances with initconfig_dir instead of sysconf_dir
+- Ticket 49984 - Add an empty domain creation to the dscreate
+- Ticket 49950 -  PassSync not setting pwdLastSet attribute in Active Directory after Pw update from LDAP sync for normal user
+- Ticket 50046 - Remove irrelevant debug-log messages from CLI tools
+- Ticket 50022, 50012, 49956, and 49800: Various dsctl/dscreate fixes
+- Ticket 49927 - dsctl db2index does not work
+- Ticket 49814 - dscreate should handle selinux ports that are in a range
+- Ticket 49543 - fix certmap dn comparison
+- Ticket 49994 - comment out dev paths
+- Ticket 49994 - Add backend features to CLI
+- Ticket 48081 - Add new CI tests for password
+
 * Thu Nov 1 2018 Mark Reynolds <mreynolds@redhat.com> - 1.4.0.19-1
 - Bump version to 1.4.0.19
 - Ticket 50026 - audit logs does not capture the operation where nsslapd-lookthroughlimit is modified
diff --git a/sources b/sources
index 26861fb..aac9a98 100644
--- a/sources
+++ b/sources
@@ -1,2 +1 @@
-SHA512 (jemalloc-5.1.0.tar.bz2) = d9abebe54d303ca931b8c31c1033f23ff5fb060f2377ec8386f4d79c352e65c78ed34f680c352dac14f7d7115d10245782d553d988bc13df2eb34a2f0942ef6f
-SHA512 (389-ds-base-1.4.0.19.tar.bz2) = 8ae906bd30bf646f2b157fd259b0f92ed6cdba47f44e0c928cf9cb10529858464616b11bab9301e9c51bae139b1c3fe9131694217ce99901b0e8fd3421329b62
+SHA512 (389-ds-base-1.4.0.20.tar.bz2) = bcd22f64b7e29a0d58dc19c428eaabb3674b5f2a6029f62eeadf4e21346bcb79e689d91e2689d01b625d731cac8b49150343975961a52c1552d2454038598c20