diff --git a/.gitignore b/.gitignore
index a96094d..f79f6c6 100644
--- a/.gitignore
+++ b/.gitignore
@@ -151,3 +151,4 @@
 /389-ds-base-1.3.7.3.tar.bz2
 /389-ds-base-1.3.7.4.tar.bz2
 /389-ds-base-1.4.0.0.tar.bz2
+/389-ds-base-1.4.0.1.tar.bz2
diff --git a/389-ds-base.spec b/389-ds-base.spec
index a6362e6..f9608c9 100644
--- a/389-ds-base.spec
+++ b/389-ds-base.spec
@@ -29,7 +29,7 @@
 
 Summary:          389 Directory Server (base)
 Name:             389-ds-base
-Version:          1.4.0.0
+Version:          1.4.0.1
 Release:          %{?relprefix}1%{?prerel}%{?dist}
 License:          GPLv3+
 URL:              http://www.port389.org
@@ -184,7 +184,7 @@ Group:            System Environment/Daemons
 Requires:         %{name} = %{version}-%{release}
 
 # upgrade path from monolithic %{name} (including -libs & -devel) to %{name} + %{name}-snmp
-Obsoletes:        %{name} <= 1.3.7.3
+Obsoletes:        %{name} <= 1.4.0.0
 
 %description      snmp
 SNMP Agent for the 389 Directory Server base package.
@@ -331,9 +331,9 @@ echo remove pid files . . . >> $output 2>&1 || :
 echo upgrading instances . . . >> $output 2>&1 || :
 DEBUGPOSTSETUPOPT=`/usr/bin/echo $DEBUGPOSTSETUP | /usr/bin/sed -e "s/[^d]//g"`
 if [ -n "$DEBUGPOSTSETUPOPT" ] ; then
-    %{_sbindir}/setup-ds.pl -l $output -$DEBUGPOSTSETUPOPT -u -s General.UpdateMode=offline >> $output 2>&1 || :
+    %{_sbindir}/setup-ds.pl -$DEBUGPOSTSETUPOPT -u -s General.UpdateMode=offline >> $output 2>&1 || :
 else
-    %{_sbindir}/setup-ds.pl -l $output -u -s General.UpdateMode=offline >> $output 2>&1 || :
+    %{_sbindir}/setup-ds.pl -u -s General.UpdateMode=offline >> $output 2>&1 || :
 fi
 
 # restart instances that require it
@@ -475,6 +475,26 @@ fi
 %{python3_sitelib}/*
 
 %changelog
+* Mon Oct 9 2017 Mark Reynolds <mreynolds@redhat.com> - 1.4.0.1-1
+- Bump version to 1.4.0.1-1
+- Ticket 49038 - remove legacy replication - change cleanup script precedence
+- Ticket 49392 - memavailable not available
+- Ticket 49235 - pbkdf2 by default
+- Ticket 49279 - remove dsktune
+- Ticket 49372 - filter optimisation improvements for common queries
+- Ticket 49320 - Activating already active role returns error 16
+- Ticket 49389 - unable to retrieve specific cosAttribute when subtree password policy is configured
+- Ticket 49092 - Add CI test for schema-reload
+- Ticket 49388 - repl-monitor - matches null string many times in regex
+- Ticket 49387 - pbkdf2 settings were too aggressive
+- Ticket 49385 - Fix coverity warnings
+- Ticket 49305 - Need to wrap atomic calls
+- Ticket 48973 - Indexing a ExactIA5Match attribute with a IgnoreIA5Match matching rule triggers a warning
+- Ticket 49378 - server init fails
+- Ticket 49305 - Need to wrap atomic calls
+- Ticket 49180 - add CI test
+- Ticket 49180 - errors log filled with attrlist_replace - attr_replace
+
 * Fri Sep 22 2017 Mark Reynolds <mreynolds@redhat.com> - 1.4.0.0-1
 - Bump version to 1.4.0.0-1
 
diff --git a/sources b/sources
index 60c4329..8b2ff30 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (389-ds-base-1.4.0.0.tar.bz2) = bfb64abeae5217b6877eea984b87a4d135078df1c5da667a602e4906b88da0efeba660a83ccaad4cd51e131f475b3acb11d2d9de759279113dc642cedfba1940
+SHA512 (389-ds-base-1.4.0.1.tar.bz2) = 37cfe635886cb85d89037b2fefb4ea4a9e76f9d71ed36cc8d8f62387b6cd2f606b83326279e68a057ec7441fd1af86afa2299cd58f823aa9f8fd3a5df42bc170