diff --git a/.gitignore b/.gitignore
index c62ecc6..87f3ef1 100644
--- a/.gitignore
+++ b/.gitignore
@@ -178,3 +178,4 @@
 /389-ds-base-1.4.0.23.tar.bz2
 /389-ds-base-1.4.0.24.tar.bz2
 /389-ds-base-1.4.0.25.tar.bz2
+/389-ds-base-1.4.0.26.tar.bz2
diff --git a/389-ds-base.spec b/389-ds-base.spec
index 4c063a1..62621b4 100644
--- a/389-ds-base.spec
+++ b/389-ds-base.spec
@@ -44,7 +44,7 @@ ExcludeArch: i686
 
 Summary:          389 Directory Server (base)
 Name:             389-ds-base
-Version:          1.4.0.25
+Version:          1.4.0.26
 Release:          %{?relprefix}1%{?prerel}%{?dist}
 License:          GPLv3+
 URL:              https://www.port389.org
@@ -775,6 +775,13 @@ exit 0
 %doc README.md
 
 %changelog
+* Fri Jul 19 2019 Mark Reynolds <mreynolds@redhat.com> - 1.4.0.26-1
+- Bump version to 1.4.0.26
+- Issue 50499 - Fix audit issues and remove jquery from the whitelist
+- Issue 50355 - SSL version min and max not correctly applied
+- Issue 50325 - Add Security tab to UI
+- Issue 50177 - Add a new CI test case, also added fixes in lib389
+
 * Mon Jul 8 2019 Mark Reynolds <mreynolds@redhat.com> - 1.4.0.25-1
 - Bump version to 1.4.0.25
 - Issue 50431 - Fix regression from coverity fix
diff --git a/sources b/sources
index 2f7f4b2..9383e41 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
 SHA512 (jemalloc-5.1.0.tar.bz2) = d9abebe54d303ca931b8c31c1033f23ff5fb060f2377ec8386f4d79c352e65c78ed34f680c352dac14f7d7115d10245782d553d988bc13df2eb34a2f0942ef6f
-SHA512 (389-ds-base-1.4.0.25.tar.bz2) = c444c3dbe44705da435fe165d9b41323ce4aea1fa2a5574e98c6672307cbef00fdf158b4e7ff4cdf0ec7e416aaee2747deb02248c8032c9d42221d742bacf5b3
+SHA512 (389-ds-base-1.4.0.26.tar.bz2) = 66efaa4427f332b0d8c81a07a551b42e1c0947167db2ef4197407a2e78649a800f00c8fdd2e98144ce54496b70d876f62a0aad3c595f4ef6efce19ad341fe925