diff --git a/.gitignore b/.gitignore
index 957fc1c..624aec6 100644
--- a/.gitignore
+++ b/.gitignore
@@ -70,3 +70,4 @@
 /node-v6.11.0-stripped.tar.gz
 /node-v8.1.2-stripped.tar.gz
 /node-v8.1.3-stripped.tar.gz
+/node-v8.1.4-stripped.tar.gz
diff --git a/nodejs.spec b/nodejs.spec
index b4cecd1..755e48a 100644
--- a/nodejs.spec
+++ b/nodejs.spec
@@ -18,7 +18,7 @@
 %global nodejs_epoch 1
 %global nodejs_major 8
 %global nodejs_minor 1
-%global nodejs_patch 3
+%global nodejs_patch 4
 %global nodejs_abi %{nodejs_major}.%{nodejs_minor}
 %global nodejs_version %{nodejs_major}.%{nodejs_minor}.%{nodejs_patch}
 %global nodejs_release 1
@@ -100,9 +100,6 @@ Patch1: 0001-Disable-running-gyp-files-for-bundled-deps.patch
 # EPEL only has OpenSSL 1.0.1, so we need to carry a patch on that platform
 Patch2: 0002-Use-openssl-1.0.1.patch
 
-# Patch CVE-2017-1000381 until upstream updates to new version/merges patch
-Patch3: 0003-c-ares-NAPTR-parser-out-of-bounds-access.patch
-
 # RHEL 7 still uses OpenSSL 1.0.1 for now, and it segfaults on SSL
 # Revert this upstream patch until RHEL 7 upgrades to 1.0.2
 Patch5: EPEL01-openssl101-compat.patch
@@ -253,9 +250,6 @@ rm -rf deps/icu-small \
        deps/uv \
        deps/zlib
 
-# Patch CVE in c-ares
-%patch3 -p1
-
 %if 0%{?epel}
 %patch2 -p1
 %patch5 -p1
@@ -446,6 +440,11 @@ NODE_PATH=%{buildroot}%{_prefix}/lib/node_modules %{buildroot}/%{_bindir}/node -
 %{_pkgdocdir}/npm/doc
 
 %changelog
+* Tue Jul 11 2017 Stephen Gallagher <sgallagh@redhat.com> - 1:8.1.4-1
+- Update to v8.1.4
+- https://nodejs.org/en/blog/release/v8.1.4/
+- Drop upstreamed c-ares patch
+
 * Thu Jun 29 2017 Zuzana Svetlikova <zsvetlik@redhat.com> - 1:8.1.3-1
 - Update to v8.1.3
 - https://nodejs.org/en/blog/release/v8.1.3/ 
diff --git a/sources b/sources
index 35188e1..a9c344f 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (node-v8.1.3-stripped.tar.gz) = 5703cafcca96ede1b3964a4ef80ce88bfe96df237b8426c35ac53eaa250be081f857feb3e1dc0f637b581a051b5ee7dcc987ee0b39b7ee874e1bacde4722fbe9
+SHA512 (node-v8.1.4-stripped.tar.gz) = c7d4482df0185d75ad82b567576fcec34c387790f764f537ac9e66aae65807fac54fbddf24e9dd37fc58fa6258b6d1c2cbf753cb57137ca05cddd283b56a11e5