diff --git a/.gitignore b/.gitignore
index f54842b..27fe618 100644
--- a/.gitignore
+++ b/.gitignore
@@ -139,3 +139,4 @@
 /389-ds-base-1.3.5.12.tar.bz2
 /389-ds-base-1.3.5.13.tar.bz2
 /389-ds-base-1.3.5.14.tar.bz2
+/389-ds-base-1.3.5.15.tar.bz2
diff --git a/389-ds-base.spec b/389-ds-base.spec
index 2e1cdf0..74def66 100644
--- a/389-ds-base.spec
+++ b/389-ds-base.spec
@@ -33,10 +33,10 @@
 
 Summary:          389 Directory Server (base)
 Name:             389-ds-base
-Version:          1.3.5.14
+Version:          1.3.5.15
 Release:          %{?relprefix}1%{?prerel}%{?dist}
 License:          GPLv3+
-URL:              https://port389.org/
+URL:              http://www.port389.org/
 Group:            System Environment/Daemons
 BuildRoot:        %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
 Obsoletes:        %{name}-selinux
@@ -134,7 +134,7 @@ Requires:         svrcore >= 4.1.2
 # upgrade path from monolithic %{name} (including -libs & -devel) to %{name} + %{name}-snmp
 Obsoletes:        %{name} <= 1.3.5.4
 
-Source0:          https://port389.org/binaries/%{name}-%{version}%{?prerel}.tar.bz2
+Source0:          http://www.port389.org/binaries/%{name}-%{version}%{?prerel}.tar.bz2
 # 389-ds-git.sh should be used to generate the source tarball from git
 Source1:          %{name}-git.sh
 Source2:          %{name}-devel.README
@@ -457,6 +457,16 @@ fi
 %{_sysconfdir}/%{pkgname}/dirsrvtests
 
 %changelog
+* Thu Nov 03 2016 Mark Reynolds <mreynolds@redhat.com> - 1.3.5.15-1
+- Bump version to 1.3.5.15-1
+- bz1358565 -  clear and unsalted password types are vulnerable to timing attack
+- Ticket 49016 - (un)register/migration/remove may fail if there is no suffix on 'userRoot' backend
+- Ticket 48328 - Add missing dependency
+- Ticket 49009 - args debug logging must be more restrictive
+- Ticket 49014 - ns-accountstatus.pl shows wrong status for accounts inactivated by Account policy plugin
+- Ticket 47703 - remove search limit for aci group evaluation
+- Ticket 48909 - Replication stops working in FIPS mode
+
 * Thu Oct 13 2016 Mark Reynolds <mreynolds@redhat.com> - 1.3.5.14-1
 - Bump version to 1.3.5.14-1
 - Ticket 48992 - Total init may fail if the pushed schema is rejected
diff --git a/sources b/sources
index 8d98433..810b2fc 100644
--- a/sources
+++ b/sources
@@ -1,2 +1 @@
-ef8fcb122a94846d3b3009489acb273a  389-ds-base-1.3.5.14.tar.bz2
-22a201e208b82b307ba425e099b066ed  nunc-stans-0.1.8.tar.bz2
+724f4f1907844da5d22a03a6d0e7b43b  389-ds-base-1.3.5.15.tar.bz2