diff --git a/.gitignore b/.gitignore
index 27134f6..4233e2d 100644
--- a/.gitignore
+++ b/.gitignore
@@ -165,3 +165,4 @@
 /389-ds-base-1.4.0.11.tar.bz2
 /jemalloc-5.1.0.tar.bz2
 /389-ds-base-1.4.0.12.tar.bz2
+/389-ds-base-1.4.0.13.tar.bz2
diff --git a/389-ds-base.spec b/389-ds-base.spec
index 36d3dcf..79245bb 100644
--- a/389-ds-base.spec
+++ b/389-ds-base.spec
@@ -44,7 +44,7 @@ bundle_jemalloc = 0
 
 Summary:          389 Directory Server (base)
 Name:             389-ds-base
-Version:          1.4.0.12
+Version:          1.4.0.13
 Release:          %{?relprefix}1%{?prerel}%{?dist}
 License:          GPLv3+
 URL:              http://www.port389.org
@@ -784,6 +784,13 @@ exit 0
 %doc README.md
 
 %changelog
+* Thu Jul 19 2018 Mark Reynolds <mreynolds@redhat.com> - 1.4.0.13-1
+- Bump version to 1.4.0.13
+- Ticket 49854 - ns-slapd should create run_dir and lock_dir directories at startup
+- Ticket 49806 - Add SASL functionality to CLI/UI
+- Ticket 49789 - backout original security fix as it caused a regression in FreeIPA
+- Ticket 49857 - RPM scriptlet for 389-ds-base-legacy-tools throws an error
+
 * Tue Jul 17 2018 Mark Reynolds <mreynolds@redhat.com> - 1.4.0.12-1
 - Bump version to 1.4.0.12-1
 - Ticket 48377 - Move jemalloc license to /usr/share/licences
diff --git a/sources b/sources
index 2d38bb8..3b6c680 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
+SHA512 (389-ds-base-1.4.0.13.tar.bz2) = 6f2014b069b1bf62ff297a41551a9c681b4a3dfead881a483781a827404034272e68ad3173c89d047eed58d894aa64be73da2f483bf20970f295ace7e614f8a8
 SHA512 (jemalloc-5.1.0.tar.bz2) = d9abebe54d303ca931b8c31c1033f23ff5fb060f2377ec8386f4d79c352e65c78ed34f680c352dac14f7d7115d10245782d553d988bc13df2eb34a2f0942ef6f
-SHA512 (389-ds-base-1.4.0.12.tar.bz2) = 4d14db63bb6d61b08f395368b953d5eb8c3c8d3d9a6ab7b25cfb18b8dcefe1607ec8f7842afe6e798da04985f2e026ea9c82cae229266047e555eeca39027c28