diff --git a/.gitignore b/.gitignore
index 281a931..c450c7b 100644
--- a/.gitignore
+++ b/.gitignore
@@ -13,3 +13,4 @@
 /opendnssec-1.4.5.tar.gz
 /opendnssec-1.4.6.tar.gz
 /opendnssec-1.4.7.tar.gz
+/opendnssec-1.4.9.tar.gz
diff --git a/opendnssec.spec b/opendnssec.spec
index 34630ee..e12d77d 100644
--- a/opendnssec.spec
+++ b/opendnssec.spec
@@ -3,8 +3,8 @@
 
 Summary: DNSSEC key and zone management software
 Name: opendnssec
-Version: 1.4.7
-Release: 3%{?prever}%{?dist}
+Version: 1.4.9
+Release: 1%{?prever}%{?dist}
 License: BSD
 Url: http://www.opendnssec.org/
 Source0: http://www.opendnssec.org/files/source/%{?prever:testing/}%{name}-%{version}%{?prever}.tar.gz
@@ -14,7 +14,6 @@ Source3: ods.sysconfig
 Source4: conf.xml
 Source5: tmpfiles-opendnssec.conf
 Source6: opendnssec.cron
-Patch1: opendnssec-1.4.7-extract.patch
 
 Group: Applications/System
 Requires: opencryptoki, softhsm, systemd-units
@@ -41,7 +40,6 @@ name server. It requires a PKCS#11 crypto module library, such as softhsm
 
 %prep
 %setup -q -n %{name}-%{version}%{?prever}
-%patch1 -p1
 # bump default policy ZSK keysize to 2048
 sed -i "s/1024/2048/" conf/kasp.xml.in
 
@@ -63,7 +61,7 @@ mkdir -p %{buildroot}/var/opendnssec/{tmp,signed,signconf}
 install -d -m 0755 %{buildroot}%{_initrddir} %{buildroot}%{_sysconfdir}/cron.d/
 install -m 0644 %{SOURCE6} %{buildroot}/%{_sysconfdir}/cron.d/opendnssec
 rm -f %{buildroot}/%{_sysconfdir}/opendnssec/*.sample
-install -d -m 0755 %{buildroot}/%{_sysconfdir}/sysconfig 
+install -d -m 0755 %{buildroot}/%{_sysconfdir}/sysconfig
 install -d -m 0755 %{buildroot}%{_unitdir}
 install -m 0644 %{SOURCE1} %{buildroot}%{_unitdir}/
 install -m 0644 %{SOURCE2} %{buildroot}%{_unitdir}/
@@ -73,7 +71,7 @@ mkdir -p %{buildroot}%{_sysconfdir}/tmpfiles.d/
 install -m 0644 %{SOURCE5} %{buildroot}%{_sysconfdir}/tmpfiles.d/opendnssec.conf
 mkdir -p %{buildroot}%{_localstatedir}/run/opendnssec
 
-%files 
+%files
 %{_unitdir}/ods-enforcerd.service
 %{_unitdir}/ods-signerd.service
 %config(noreplace) %{_sysconfdir}/tmpfiles.d/opendnssec.conf
@@ -121,6 +119,10 @@ ods-ksmutil update all >/dev/null 2>/dev/null ||:
 %systemd_postun_with_restart ods-signerd.service
 
 %changelog
+* Mon Feb 01 2016 Paul Wouters <pwouters@redhat.com> - 1.4.9-1
+- Updated to 1.4.9
+- Removed merged in patch
+
 * Wed Jun 17 2015 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.4.7-3
 - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
 
@@ -229,7 +231,7 @@ ods-ksmutil update all >/dev/null 2>/dev/null ||:
 - Patch for crasher with deleted RRsets and NSEC3/OPTOUT chains
 
 * Mon Mar 26 2012 Paul Wouters <pwouters@redhat.com> - 1.4.0-0.a1.2
-- Added opendnssec LICENSE file from trunk (Thanks Jakob!) 
+- Added opendnssec LICENSE file from trunk (Thanks Jakob!)
 
 * Mon Mar 26 2012 Paul Wouters <pwouters@redhat.com> - 1.4.0-0.a1.1
 - Fix macros in comment
@@ -266,4 +268,4 @@ ods-ksmutil update all >/dev/null 2>/dev/null ||:
 - Fix upstream conf.xml to point to actually used library paths
 
 * Thu Mar  3 2011 Paul Wouters <paul@xelerance.com> - 1.2.0-1
-- Initial package for Fedora 
+- Initial package for Fedora
diff --git a/sources b/sources
index 1db5a67..963ca6b 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-363387b90624acc2e3f6d33fea23c2d3  opendnssec-1.4.7.tar.gz
+7d0c9e54d7ed36c6f6be9636997bea90  opendnssec-1.4.9.tar.gz