diff --git a/freeipa.spec b/freeipa.spec
index d49a402..a1d8cf7 100644
--- a/freeipa.spec
+++ b/freeipa.spec
@@ -88,7 +88,7 @@
 
 Name:           freeipa
 Version:        %{VERSION}
-Release:        3%{?dist}
+Release:        4%{?dist}
 Summary:        The Identity, Policy and Audit system
 
 Group:          System Environment/Base
@@ -1777,6 +1777,9 @@ fi
 %endif # with_ipatests
 
 %changelog
+* Fri Feb 09 2018 Igor Gnatenko <ignatenkobrain@fedoraproject.org> - 4.6.3-4
+- Escape macros in %%changelog
+
 * Thu Feb  8 2018 Rob Crittenden <rcritten@redhat.com> - 4.6.3-3
 - Don't fail on upgrades if KRA is not installed
 - Remove Conflicts between mod_wsgi and python3-mod_wsgi
@@ -1844,7 +1847,7 @@ fi
 * Tue May 23 2017 Tomas Krizek <tkrizek@redhat.com> - 4.4.4-2
 - Fixes #1448049 Subpackage freeipa-server-common has unmet dependencies on Rawhide
 - Fixes #1430247 FreeIPA server deployment runs ipa-custodia on Python 3, should use Python 2
-- Fixes #1446744 python2-ipaclient subpackage does not own %{python_sitelib}/ipaclient/plugins
+- Fixes #1446744 python2-ipaclient subpackage does not own %%{python_sitelib}/ipaclient/plugins
 - Fixes #1440525 surplus 'the' in output of `ipa-adtrust-install`
 - Fixes #1411810 ipa-replica-install fails with 406 Client Error
 - Fixes #1405814 ipa plugins: ERROR an internal error occured