diff --git a/389-ds-base.spec b/389-ds-base.spec
index fcfe323..d3c0969 100644
--- a/389-ds-base.spec
+++ b/389-ds-base.spec
@@ -45,7 +45,7 @@ ExcludeArch: i686
 Summary:          389 Directory Server (base)
 Name:             389-ds-base
 Version:          1.4.0.17
-Release:          %{?relprefix}1%{?prerel}%{?dist}
+Release:          %{?relprefix}2%{?prerel}%{?dist}
 License:          GPLv3+
 URL:              https://www.port389.org
 Group:            System Environment/Daemons
@@ -788,17 +788,21 @@ exit 0
 %doc README.md
 
 %changelog
-* Tue Sep 25 2018 Mark Reynolds <mreynolds@redhat.com> - 1.4.0.17-1
-- Bump version to 1.4.0.17
-- Ticket 49947 - Coverity: 389-ds-base-1.4.0.16.20180905git8ff8cb8
+* Tue Oct 9 2018 Mark Reynolds <mreynolds@redhat.com> - 1.4.0.17-2
+- Bump version to 1.4.0.17-2
+- Ticket 49969 - DOS caused by malformed search operation (security fix)
+- Ticket 49943 - rfc3673_all_oper_attrs_test is not strict enough
+- Ticket 49915 - Master ns-slapd had 100% CPU usage after starting replication and replication cannot finish
+- Ticket 49963 - ASAN build fails on F28
+- Ticket 49947 - Coverity Fixes
 - Ticket 49958 - extended search fail to match entries
 - Ticket 49928 - WebUI schema functionality and improve CLI part
 - Ticket 49954 - On s390x arch retrieved DB page size is stored as size_t rather than uint32_t
 - Ticket 49928 - Refactor and improve schema CLI/lib389 part to DSLdapObject
 - Ticket 49926 - Fix replication tests on 1.3.x
 - Ticket 49926 - Add replication functionality to dsconf
-- Ticket 49887 - Clean thread local usage
-- Ticket 49937 - Log buffer exceeded emergency logging msg is not thread-safe
+- Ticket 49887 - Clean up thread local usage
+- Ticket 49937 - Log buffer exceeded emergency logging msg is not thread-safe (security fix)
 - Ticket 49866 - fix typo in cos template in pwpolicy subtree create
 - Ticket 49930 - Correction of the existing fixture function names to remove test_ prefix
 - Ticket 49932 - Crash in delete_passwdPolicy when persistent search connections are terminated unexpectedly
diff --git a/sources b/sources
index 795dbad..c5eab0f 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
+SHA512 (389-ds-base-1.4.0.17.tar.bz2) = d18b048c300a4d64f3c3bcc866364074ec574a78a0937bd2ca2809d577a5a1d9af720e102f18edd8a384f36bba8a65dca971ce7f899af76be5e4067599330f7e
 SHA512 (jemalloc-5.1.0.tar.bz2) = d9abebe54d303ca931b8c31c1033f23ff5fb060f2377ec8386f4d79c352e65c78ed34f680c352dac14f7d7115d10245782d553d988bc13df2eb34a2f0942ef6f
-SHA512 (389-ds-base-1.4.0.17.tar.bz2) = 4e3c49c31d1fbea90406483e7865116597e134c3c65eefbc5494b0f18a45efa6956a1a2a904b242d5c0618ad46618208ee954caff18fa02547e970d1518350af