diff --git a/.gitignore b/.gitignore
index 27fe618..e6fedc6 100644
--- a/.gitignore
+++ b/.gitignore
@@ -140,3 +140,5 @@
 /389-ds-base-1.3.5.13.tar.bz2
 /389-ds-base-1.3.5.14.tar.bz2
 /389-ds-base-1.3.5.15.tar.bz2
+/389-ds-base-1.3.5.16.tar.bz2
+/389-ds-base-1.3.6.3.tar.bz2
diff --git a/389-ds-base.spec b/389-ds-base.spec
index 74def66..ddbcbe8 100644
--- a/389-ds-base.spec
+++ b/389-ds-base.spec
@@ -33,7 +33,7 @@
 
 Summary:          389 Directory Server (base)
 Name:             389-ds-base
-Version:          1.3.5.15
+Version:          1.3.5.16
 Release:          %{?relprefix}1%{?prerel}%{?dist}
 License:          GPLv3+
 URL:              http://www.port389.org/
@@ -457,6 +457,46 @@ fi
 %{_sysconfdir}/%{pkgname}/dirsrvtests
 
 %changelog
+* Wed Mar 22 2017 Mark Reynolds <mreynolds@redhat.com> - 1.3.5.16-1
+- Bump version to 1.3.5.16-1
+- Issue 49188 - retrocl can crash server at shutdown
+- Ticket 49179 - Missing components in 1.3.5 defaults.inf
+- Issue 48989 - Overflow in counters and monitor
+- Issue 49095 - targetattr wildcard evaluation is incorrectly case sensitive
+- Issue 49065 - dbmon.sh fails if you have nsslapd-require-secure-binds enabled
+- Issue 49157 - ds-logpipe.py crashes for non-existing users
+- Issue 49045 - Fix double-free in _cl5NewDBFile() error path
+- Issue 49170 - sync plugin thread count not handled correctly
+- Issue 49158 - fix latest coverity issues
+- Issue 49122 - Filtered nsrole that uses nsrole crashes the  server
+- Ticket #49121 - ns-slapd crashes in ldif_sput due to the output buf size is less than the real size.
+- Ticket 49008 - check if ruv element exists
+- Ticket 49016 - (un)register/migration/remove may fail if there is no suffix on 'userRoot' backend
+- Ticket #49104 - Add CI test
+- Ticket #49104 - dbscan-bin crashing due to a segmentation fault
+- Ticket 49079: deadlock on cos cache rebuild
+- Ticket 49008 backport 1.3.5 : aborted operation can leave RUV in incorrect state
+- Ticket 49008 backport 1.3.5 : aborted operation can leave RUV in incorrect state
+- Ticket 47973 - custom schema is registered in small caps after schema reload
+- Ticket #49088 - 389-ds-base rpm postinstall script bugs
+- Ticket #49082 - Adjusted the CI test case to the fix.
+- Ticket #49082 - Fix password expiration related shadow attributes
+- Ticket #49080 - shadowExpire should not be a calculated value
+- Ticket 49074 - incompatible nsEncryptionConfig object definition prevents RHEL 7->6 schema replication
+- Ticket 48964 - should not free repl name after purging changelog
+- Ticket 48964 - cleanallruv changelog purging removes wrong  rid
+- Ticket 49072 - fix log refactoring(part 2)
+- Ticket 49072 - fix log refactoring
+- Ticket 49072 - validate memberof fixup task args
+- Ticket 49071 - Import with duplicate DNs throws unexpected errors
+- Ticket 47966 - CI test: added test cases for ticket 47966
+- Ticket #48987 - Heap use after free in dblayer_close_indexes
+- Ticket 49068 - 1.3.5 use std c99
+- Ticket 49020 - do not treat missing csn as fatal
+- Ticket 48133 v2 Non tombstone entry which dn starting with "nsuniqueid=...," cannot be delete
+- Ticket #47911 - Move dirsrv-snmp.service to 389-ds-base-snmp package
+
+
 * Thu Nov 03 2016 Mark Reynolds <mreynolds@redhat.com> - 1.3.5.15-1
 - Bump version to 1.3.5.15-1
 - bz1358565 -  clear and unsalted password types are vulnerable to timing attack
diff --git a/sources b/sources
index 027ef60..7f42600 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
-22a201e208b82b307ba425e099b066ed  nunc-stans-0.1.8.tar.bz2
-724f4f1907844da5d22a03a6d0e7b43b  389-ds-base-1.3.5.15.tar.bz2
+SHA512 (nunc-stans-0.1.8.tar.bz2) = a32c3526cf977990ea0879e3ea10c413f46d6d60563f886c86d84819553b25a5daecc14af8db5dd2274ec9cebe70da7b3a2db322d489bbd5155407d05dc0422d
+SHA512 (389-ds-base-1.3.5.16.tar.bz2) = bcf96350f6a5b7e689f40d7810c72974cdc21c4a5a99fe39fa30c8498334d4629ad198f128dcd6800c8f0132393d4efe4fe27561873afe0f1e9a9673953436dd