diff --git a/.gitignore b/.gitignore
index 37b1b09..58575de 100644
--- a/.gitignore
+++ b/.gitignore
@@ -48,3 +48,4 @@
 /389-ds-base-1.2.11.24.tar.bz2
 /389-ds-base-1.2.11.25.tar.bz2
 /389-ds-base-1.2.11.26.tar.bz2
+/389-ds-base-1.2.11.28.tar.bz2
diff --git a/389-ds-base.spec b/389-ds-base.spec
index bb62372..d44f8af 100644
--- a/389-ds-base.spec
+++ b/389-ds-base.spec
@@ -9,7 +9,7 @@
 
 Summary:          389 Directory Server (base)
 Name:             389-ds-base
-Version:          1.2.11.26
+Version:          1.2.11.28
 Release:          %{?relprefix}1%{?prerel}%{?dist}
 License:          GPLv2 with exceptions
 URL:              http://port389.org/
@@ -319,6 +319,36 @@ exit 0
 %{_libdir}/%{pkgname}/libslapd.so.*
 
 %changelog
+* Fri Mar 14 2014 Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.28-1
+- bump version to 1.2.11.28 (This release is based upon 1.2.11.25 + following tickets.)
+- Ticket 47739 - directory server is insecurely misinterpreting authzid on a SASL/GSSAPI bind
+- Ticket 47731 - A tombstone entry is deleted by ldapdelete
+- Ticket 47729 - Directory Server crashes if shutdown during a replication initialization
+- Ticket 47637 - rsa_null_sha should not be enabled by default
+- Ticket 417, 458, 47522 - Password Administrator Backport
+- Ticket 47455 - valgrind - value mem leaks, uninit mem usage
+- fix coverity 11915 - dead code - introduced with fix for ticket 346
+- Ticket 47369  version2 - provide default syntax plugin
+- Ticket 346 - version 4 Slow ldapmodify operation time for large quantities of multi-valued attribute values
+- Ticket 415 - winsync doesn't sync DN valued attributes if DS DN value doesn't exist
+- Ticket 47642 - Windows Sync group issues
+- Ticket 47692 - single valued attribute replicated ADD does not work
+- Ticket 47677 - Size returned by slapi_entry_size is not accurate
+- Ticket 47693 - Environment variables are not passed when DS is started via service
+- Ticket 47693 - Environment variables are not passed when DS is started via service
+- Ticket 471 - logconv.pl tool removes the access logs contents if "-M" is not correctly used
+- Ticket 47463 - IDL-style can become mismatched during partial restoration
+- Ticket 47638 - Overflow in nsslapd-disk-monitoring-threshold on 32bit platform
+- Ticket 47641 - 7-bit check plugin not checking MODRDN operation
+- Ticket 47678 - modify-delete userpassword
+- Ticket 47516 - replication stops with excessive clock skew
+- Ticket 47627 - Fix replication logging
+- Ticket 47627 - changelog iteration should ignore cleaned rids when getting the minCSN
+- Ticket 47623 - fix memleak caused by 47347
+- Ticket 47587 - hard coded limit of 64 masters in agreement and changelog code
+- Ticket 47591 - entries with empty objectclass attribute value can be hidden
+- Ticket 47596 - attrcrypt fails to find unlocked key
+
 * Mon Mar 10 2014 Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.26-1
 - bump version to 1.2.11.26
 - Ticket 47739 - directory server is insecurely misinterpreting authzid on a SASL/GSSAPI bind
diff --git a/sources b/sources
index 796b206..04e2c9f 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-2078b631679d7582c9cb441cab651438  389-ds-base-1.2.11.26.tar.bz2
+f052d0fe9edb21e8359ea6c93260acd5  389-ds-base-1.2.11.28.tar.bz2