diff --git a/.gitignore b/.gitignore
index 55d8f24..c8a2284 100644
--- a/.gitignore
+++ b/.gitignore
@@ -154,3 +154,4 @@
 /389-ds-base-1.3.7.6.tar.bz2
 /389-ds-base-1.3.7.7.tar.bz2
 /389-ds-base-1.3.7.8.tar.bz2
+/389-ds-base-1.3.7.9.tar.bz2
diff --git a/389-ds-base.spec b/389-ds-base.spec
index bf26b98..bc2adba 100644
--- a/389-ds-base.spec
+++ b/389-ds-base.spec
@@ -29,7 +29,7 @@
 
 Summary:          389 Directory Server (base)
 Name:             389-ds-base
-Version:          1.3.7.8
+Version:          1.3.7.9
 Release:          %{?relprefix}1%{?prerel}%{?dist}
 License:          GPLv3+
 URL:              http://www.port389.org
@@ -41,7 +41,7 @@ Requires:         %{name}-libs = %{version}-%{release}
 Provides:         ldif2ldbm >= 0
 
 BuildRequires:    nspr-devel
-BuildRequires:    nss-devel
+BuildRequires:    nss-devel >= 3.34
 BuildRequires:    perl-generators
 BuildRequires:    svrcore-devel >= 4.1.3
 BuildRequires:    openldap-devel
@@ -150,7 +150,7 @@ the LDAP server and command line utilities for server administration.
 Summary:          Core libraries for 389 Directory Server
 Group:            System Environment/Daemons
 BuildRequires:    nspr-devel
-BuildRequires:    nss-devel
+BuildRequires:    nss-devel >= 3.34
 BuildRequires:    svrcore-devel >= 4.1.3
 BuildRequires:    openldap-devel
 BuildRequires:    libdb-devel
@@ -174,7 +174,7 @@ Group:            Development/Libraries
 Requires:         %{name}-libs = %{version}-%{release}
 Requires:         pkgconfig
 Requires:         nspr-devel
-Requires:         nss-devel
+Requires:         nss-devel >= 3.34
 Requires:         svrcore-devel >= 4.1.3
 Requires:         openldap-devel
 Requires:         libtalloc
@@ -530,6 +530,37 @@ fi
 %endif
 
 %changelog
+* Wed Jan 31 2018 Mark Reynolds <mreynolds@redhat.com> - 1.3.7.9-1
+- Bump version to 1.3.7.9
+- CVE-2017-15134 - Remote DoS via search filters in  slapi_filter_sprintf
+- Ticket 49546 - Fix broken snmp MIB file
+- Ticket 49541 - Replica ID config validation fix
+- Ticket 49370 - Crash when using a global and local pw  policies
+- Ticket 49540 - Indexing task is reported finished too early regarding the backend status
+- Ticket 49534 - Fix coverity regression
+- Ticket 49541 - repl config should not allow rid 65535 for masters
+- Ticket 49370 - Add all the password policy defaults to a new local policy
+- Ticket 49526 - Improve create_test.py script
+- Ticket 49534 - Fix coverity issues and regression
+- Ticket 49523 - memberof: schema violation error message is confusing as memberof will likely repair target entry
+- Ticket 49532 - coverity issues - fix compiler warnings & clang issues
+- Ticket 49463 - After cleanALLruv, there is a flow of keep alive DEL
+- Ticket 48184 - close connections at shutdown cleanly.
+- Ticket 49509 - Indexing of internationalized matching rules is failing
+- Ticket 49531 - coverity issues - fix memory leaks
+- Ticket 49529 - Fix Coverity warnings: invalid deferences
+- Ticket 49413 - Changelog trimming ignores disabled replica-agreement
+- Ticket 49446 - cleanallruv should ignore cleaned replica Id in processing changelog if in force mode
+- Ticket 49278 - GetEffectiveRights gives false-negative
+- Ticket 49524 - Password policy: minimum token length fails  when the token length is equal to attribute length
+- Ticket 49493 - heap use after free in csn_as_string
+- Ticket 49495 - Fix memory management is vattr.
+- Ticket 49471 - heap-buffer-overflow in ss_unescape
+- Ticket 49449 - Load sysctl values on rpm upgrade.
+- Ticket 49470 - overflow in pblock_get
+- Ticket 49474 - sasl allow mechs does not operate correctly
+- Ticket 49460 - replica_write_ruv log a failure even when it succeeds
+
 * Mon Nov 20 2017 Mark Reynolds <mreynolds@redhat.com> - 1.3.7.8-1
 - Bump version to 1.3.7.8
 - Ticket 49298 - fix complier warn
diff --git a/sources b/sources
index 6df7b26..795b0a6 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (389-ds-base-1.3.7.8.tar.bz2) = 356e6582dce0d1aab9f2161d0d21775d19f94f014414f8a835639900834ac62d4f87b6e0a15e10b4479a3ff2e156edd4b9908102e4f74baf4389c99f94430532
+SHA512 (389-ds-base-1.3.7.9.tar.bz2) = 5f013fdb24553702abe55210a3f08c97762206df208edb3f99993633f483e6e5d851c0d145ad19364cfaaa6932d78fe40abe582d00a42d6298efc444ccc0b3ec