diff --git a/.gitignore b/.gitignore
index 390f2ee..50fee4b 100644
--- a/.gitignore
+++ b/.gitignore
@@ -156,3 +156,4 @@
 /389-ds-base-1.3.7.8.tar.bz2
 /389-ds-base-1.3.7.9.tar.bz2
 /389-ds-base-1.3.7.10.tar.bz2
+/389-ds-base-1.3.8.1.tar.bz2
diff --git a/389-ds-base.spec b/389-ds-base.spec
index c9d1ff3..4da16ae 100644
--- a/389-ds-base.spec
+++ b/389-ds-base.spec
@@ -29,7 +29,7 @@
 
 Summary:          389 Directory Server (base)
 Name:             389-ds-base
-Version:          1.3.7.10
+Version:          1.3.8.1
 Release:          %{?relprefix}1%{?prerel}%{?dist}
 License:          GPLv3+
 URL:              http://www.port389.org
@@ -531,6 +531,16 @@ fi
 %endif
 
 %changelog
+* Tue May 8 2018 Mark Reynolds <mreynolds@redhat.com> - 1.3.8.1-1
+- Bump version to 1.3.8.1
+- Ticket 49661 - CVE-2018-1089 - Crash from long search filter
+- Ticket 49652 - DENY aci's are not handled properly
+- Ticket 49649 - Use reentrant crypt_r()
+- Ticket 49644 - crash in debug build
+- Ticket 49631 - same csn generated twice
+- Ticket 48184 - revert previous patch around nunc-stans shutdown crash
+- Rebase to 1.3.8
+
 * Tue Mar 6 2018 Mark Reynolds <mreynolds@redhat.com> - 1.3.7.10-1
 - Bump version to 1.3.7.10
 - Ticket 49545 - final substring extended filter search returns invalid result
diff --git a/sources b/sources
index 9dc61f5..8fc0336 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (389-ds-base-1.3.7.10.tar.bz2) = 8721a7922971e8e7272e48dab36f6d56d51254487876c9489ec46503bba388e042c30392dacfa26f5c2e53900c739e45749dbc186292f29e9e3f1c31e0cb5440
+SHA512 (389-ds-base-1.3.8.1.tar.bz2) = c4a5dd631a2096c8021498124a9f9a5e0af8676e26620dfb0d64bc9ff3d0fb16e5e305e137d58e842249f402a42e920251500eee6b08e555fa16d6b92ca87c04