There were some critical issues in 4.0.2, mainly with integration:
https://fedorahosted.org/freeipa/ticket/4529 - broken upgrades
https://fedorahosted.org/freeipa/ticket/4430 - python-qrcode packaging fix
https://fedorahosted.org/freeipa/ticket/4395 - update of SSL ciphers
https://fedorahosted.org/freeipa/ticket/4534 - operational attribute ACIs
https://fedorahosted.org/freeipa/ticket/4537 - referential integrity
All the fixes are pushed now. Please test!
If nothing else shows up, I will release 4.0.3 today.
Freeipa-devel mailing list