diff --git a/.gitignore b/.gitignore
index bf0a7be..8ef0467 100644
--- a/.gitignore
+++ b/.gitignore
@@ -111,3 +111,4 @@
 /389-ds-base-1.3.3.6.tar.bz2
 /389-ds-base-1.3.3.7.tar.bz2
 /389-ds-base-1.3.3.8.tar.bz2
+/389-ds-base-1.3.3.9.tar.bz2
diff --git a/389-ds-base.spec b/389-ds-base.spec
index d9dcee9..d963ef0 100644
--- a/389-ds-base.spec
+++ b/389-ds-base.spec
@@ -24,8 +24,8 @@
 
 Summary:          389 Directory Server (base)
 Name:             389-ds-base
-Version:          1.3.3.8
-Release:          %{?relprefix}2%{?prerel}%{?dist}
+Version:          1.3.3.9
+Release:          %{?relprefix}1%{?prerel}%{?dist}
 License:          GPLv2 with exceptions
 URL:              http://port389.org/
 Group:            System Environment/Daemons
@@ -314,6 +314,35 @@ fi
 %{_libdir}/%{pkgname}/libns-dshttpd.so*
 
 %changelog
+* Fri Mar  6 2015 Noriko Hosoi <nhosoi@redhat.com> - 1.3.3.9-1
+- bump version to 1.3.3.9
+- Bug 1199675 - CVE-2014-8112 CVE-2014-8105 389-ds-base: various flaws [fedora-all]
+- Ticket 47801 - RHDS keeps on logging write_changelog_and_ruv: failed to update RUV for unknown
+- Ticket 47957 - Make ReplicaWaitForAsyncResults configurable
+- Ticket 47431 - CI test: added test cases for ticket 47431
+- Ticket 47431 - Duplicate values for the attribute nsslapd-pluginarg are not handled correctly
+- Ticket 47936: Create a global lock to serialize write operations over several backends
+- Ticket 48021 - nsDS5ReplicaBindDNGroup checkinterval not working properly
+- Ticket 48048 - Fix coverity issues - 2015/3/1
+- Ticket 48109 - substring index with nssubstrbegin: 1 is not being used with filters like (attr=x*)
+- Ticket 48109 - CI test: added test cases for ticket 48109
+- Ticket 48109 - substring index with nssubstrbegin: 1 is not being used with filters like (attr=x*)
+- Ticket 48048 - Fix coverity issues - 2015/2/24
+- Ticket 48030 - spec file should run "systemctl stop" against each running instance instead of dirsrv.target
+- Ticket 47828: DNA scope: allow to exlude some subtrees
+- Ticket 47988: test case
+- Ticket 47901: After total init, nsds5replicaLastInitStatus can report an erroneous error status (like 'Referral')
+- Ticket 48003 - add template scripts
+- Ticket 48003 - build "suite" framework
+- Ticket 48005 - CI test: added test cases for ticket 48005
+- Ticket 48005 - ns-slapd crash in shutdown phase
+- Ticket 47742 - 64bit problem on big endian: auth method not supported
+- Ticket 47836 - Do not return '0' as empty fallback value of nsds5replicalastupdatestart and nsds5replicalastupdatestart
+- Ticket 47728 - compilation failed with ' incomplete struct/union/enum' if not set USE_POSIX_RWLOCKS
+- Ticket 48027 - revise the rootdn plugin configuration validation
+- Ticket 47451 - dynamic plugins - fix crash caused by invalid  plugin config
+- Ticket 48001 - ns-activate.pl fails to activate account if it was disabled on AD
+
 * Wed Feb 25 2015 Noriko Hosoi <nhosoi@redhat.com> - 1.3.3.8-2
 - Fixes spec file to make sure all the server instances are stopped before upgrade
 - Ticket 48030 - DNS errors after IPA upgrade due to broken ReplSync
diff --git a/sources b/sources
index 3cc6e7e..76515e5 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-f90ce669c4a091ec1e7493cfc2a0a7df  389-ds-base-1.3.3.8.tar.bz2
+4e492d0a6668ad90d737fd7bc8500ee2  389-ds-base-1.3.3.9.tar.bz2