diff --git a/sources b/sources
index 448b8ab..03cbe96 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (xapian-core-1.4.5.tar.xz) = cff97a856a406583ca81164ddb704a0eeae7d8d6f94ce3b3f53d5208d657423e87dd06bdc7acb5e5904765bce1cefbc98365cde315c1d46f7b18cfba7b022ae6
+SHA512 (xapian-core-1.4.6.tar.xz) = f08168eba26a24ea00c2219d2cdfac1d904b51162fdd98d437564786375245e00010986a7d6e9c8c7548ae19aab80434b5cb0051252f902b40db2976b1008fe2
diff --git a/xapian-core.spec b/xapian-core.spec
index 9e22747..4c023a4 100644
--- a/xapian-core.spec
+++ b/xapian-core.spec
@@ -1,6 +1,6 @@
 Name:          xapian-core
-Version:       1.4.5
-Release:       4%{?dist}
+Version:       1.4.6
+Release:       1%{?dist}
 Summary:       The Xapian Probabilistic Information Retrieval Library
 License:       GPLv2+
 URL:           http://www.xapian.org/
@@ -104,6 +104,10 @@ rm -rf %{buildroot}%{_datadir}/doc/%{name}
 %{_mandir}/man1/xapian-config.1*
 
 %changelog
+* Tue Jul  3 2018 Peter Robinson <pbrobinson@fedoraproject.org> 1.4.6-1
+- Update to 1.4.6
+- CVE-2018-0499 fix (rhbz 1597583 1597585 1597586)
+
 * Fri Mar  9 2018 Peter Robinson <pbrobinson@fedoraproject.org> 1.4.5-4
 - Add gcc BR, spec cleanups