diff --git a/.gitignore b/.gitignore
index c48dd24..c03647c 100644
--- a/.gitignore
+++ b/.gitignore
@@ -181,3 +181,4 @@
 /389-ds-base-1.4.0.26.tar.bz2
 /389-ds-base-1.4.0.27.tar.bz2
 /jemalloc-5.2.0.tar.bz2
+/389-ds-base-1.4.0.28.tar.bz2
diff --git a/389-ds-base.spec b/389-ds-base.spec
index 057b803..ddb6ef5 100644
--- a/389-ds-base.spec
+++ b/389-ds-base.spec
@@ -44,7 +44,7 @@ ExcludeArch: i686
 
 Summary:          389 Directory Server (base)
 Name:             389-ds-base
-Version:          1.4.0.27
+Version:          1.4.0.28
 Release:          %{?relprefix}1%{?prerel}%{?dist}
 License:          GPLv3+
 URL:              https://www.port389.org
@@ -773,6 +773,20 @@ exit 0
 %doc README.md
 
 %changelog
+*Tue Sep 17 2019 Mark Reynolds <mreynolds@redhat.com> - 1.4.0.28-1
+- Bump version to 1.4.0.28
+- Issue 50581 - ns-slapd crashes during ldapi search
+- Issue 50499 - Audit fix - Update npm 'eslint-utils' version
+- Issue 49624 - modrdn silently fails if DB deadlock occurs
+- Issue 50542 - Fix crash in filter tests
+- Issue 49232 - Truncate the message when buffer capacity is exceeded
+- Issue 50542 - Entry cache contention during base search
+- Issue 50538 - cleanAllRUV task limit is not enforced for replicated tasks
+- Issue 50536 - Audit log heading written to log after every update
+- Issue 50525 - nsslapd-defaultnamingcontext does not change when the assigned suffix gets deleted
+- Issue 50534 - CLI change schema edit subcommand to replace
+- Issue 50534 - backport UI schema editing fix
+
 * Tue Aug 6 2019 Mark Reynolds <mreynolds@redhat.com> - 1.4.0.27-1
 - Bump version to 1.4.0.27
 - Issue 50208 - make instances mark off based on dse.ldif not sysconfig
diff --git a/sources b/sources
index 43af9c3..fd936b5 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
+SHA512 (389-ds-base-1.4.0.28.tar.bz2) = 692f0de48817082d55b2a20735f0bd9a9fd98826b3bc273541d17471744e13270e7df2439d3066b550785392ce4f54636c211c0fe77e0d3cd745ec1fc6b7b891
 SHA512 (jemalloc-5.2.0.tar.bz2) = e3be4d534770126caf10f2684aed9fe4ba1422dd47625fe50343cfb750f26eff869fcc7d1e30a96dd6c73f6614c4bbcd560fd24fc26b55ac731c43e60fd05234
-SHA512 (389-ds-base-1.4.0.27.tar.bz2) = 362010349dfa6d8d8a7a20652eff43a0e99c762b950cce76e604b5c2285eca6b8361df88463f781556af55a7708ac4394a59b0d4fb8e305fcaa62df76c89db92