diff --git a/.gitignore b/.gitignore
index 4d1102e..59dc657 100644
--- a/.gitignore
+++ b/.gitignore
@@ -201,3 +201,4 @@
 /389-ds-base-1.4.3.13.tar.bz2
 /389-ds-base-1.4.3.14.tar.bz2
 /389-ds-base-1.4.3.15.tar.bz2
+/389-ds-base-1.4.3.16.tar.bz2
diff --git a/389-ds-base.spec b/389-ds-base.spec
index 90f7390..0cf9855 100644
--- a/389-ds-base.spec
+++ b/389-ds-base.spec
@@ -44,7 +44,7 @@ ExcludeArch: i686
 
 Summary:          389 Directory Server (base)
 Name:             389-ds-base
-Version:          1.4.3.15
+Version:          1.4.3.16
 Release:          %{?relprefix}1%{?prerel}%{?dist}
 License:          GPLv3+
 URL:              https://www.port389.org
@@ -777,6 +777,19 @@ exit 0
 %doc README.md
 
 %changelog
+* Fri Nov 13 2020 Mark Reynolds <mreynolds@redhat.com> - 1.4.3.16-1
+- Bump version to 1.4.3.16
+- Issue 4432 - After a failed online import the next imports are very slow
+- Issue 4281 - dsidm user status fails with Error: 'nsUserAccount' object has no attribute 'is_locked'
+- Issue 4429 - NULL dereference in revert_cache()
+- Issue 4391 - DSE config modify does not call be_postop (#4394)
+- Issue 4329 - Sync repl - if a serie of updates target the same entry then the cookie get wrong changenumber (#4356)
+- Issue 4412 - Fix CLI repl-agmt requirement for parameters (#4422)
+- Issue 4415 - unable to query schema if there are extra parenthesis
+- Issue 4350 - One line, fix invalid type error in tls_cacertdir check (#4358)
+- Issue 4350 - dsrc should warn when tls_cacertdir is invalid (#4353)
+- Issue 4351 - improve generated sssd.conf output (#4354)
+
 * Wed Oct 28 2020 Mark Reynolds <mreynolds@redhat.com> - 1.4.3.15-1
 - Bump version to 1.4.3.15
 - Issue 2526 - revert backend validation check
diff --git a/sources b/sources
index fbfc544..6135652 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
-SHA512 (389-ds-base-1.4.3.15.tar.bz2) = c0f082d6c9426b6a8ec7e2d3067a7e840c51039dd5b5af5dc07ad20ebe07f4093ee03540f1c5ae60d4966aa0eeb8697ebb4cbbfee689c31ac2fac4aaddeb058c
+SHA512 (389-ds-base-1.4.3.16.tar.bz2) = a5fc1dd74e19391cb49fa5c3c42b5ae6713a2edf1a04dc626ce065374d5a892defda8ffba642f9505c579de8208529372e9fed10a0374175b89247415b75dbdf
 SHA512 (jemalloc-5.2.1.tar.bz2) = 0bbb77564d767cef0c6fe1b97b705d368ddb360d55596945aea8c3ba5889fbce10479d85ad492c91d987caacdbbdccc706aa3688e321460069f00c05814fae02