diff --git a/.gitignore b/.gitignore
index 50fee4b..7e7e549 100644
--- a/.gitignore
+++ b/.gitignore
@@ -157,3 +157,4 @@
 /389-ds-base-1.3.7.9.tar.bz2
 /389-ds-base-1.3.7.10.tar.bz2
 /389-ds-base-1.3.8.1.tar.bz2
+/389-ds-base-1.3.8.2.tar.bz2
diff --git a/389-ds-base.spec b/389-ds-base.spec
index 4da16ae..a83136a 100644
--- a/389-ds-base.spec
+++ b/389-ds-base.spec
@@ -29,7 +29,7 @@
 
 Summary:          389 Directory Server (base)
 Name:             389-ds-base
-Version:          1.3.8.1
+Version:          1.3.8.2
 Release:          %{?relprefix}1%{?prerel}%{?dist}
 License:          GPLv3+
 URL:              http://www.port389.org
@@ -531,6 +531,14 @@ fi
 %endif
 
 %changelog
+* Thu May 24 2018 Mark Reynolds <mreynolds@redhat.com> - 1.3.8.2-1
+- Bump version to 1.3.8.2
+- Ticket 48184 - clean up and delete connections at shutdown (2nd try)
+- Ticket 49696 - replicated operations should be serialized
+- Ticket 49671 - Readonly replicas should not write internal ops to changelog
+- Ticket 49665 - Upgrade script doesn't enable CRYPT password storage plug-in
+- Ticket 49665 - Upgrade script doesn't enable PBKDF2 password storage plug-in
+
 * Tue May 8 2018 Mark Reynolds <mreynolds@redhat.com> - 1.3.8.1-1
 - Bump version to 1.3.8.1
 - Ticket 49661 - CVE-2018-1089 - Crash from long search filter
diff --git a/sources b/sources
index 8fc0336..db4d704 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (389-ds-base-1.3.8.1.tar.bz2) = c4a5dd631a2096c8021498124a9f9a5e0af8676e26620dfb0d64bc9ff3d0fb16e5e305e137d58e842249f402a42e920251500eee6b08e555fa16d6b92ca87c04
+SHA512 (389-ds-base-1.3.8.2.tar.bz2) = 91e417c9ec097c63e0af12f70702bdeb37df3b5d9503da4041c873caefc20a33a9ef841a7f8ace7ab29dbae4e2b8f47f959f1933b2ff565a22feffc5cfe519e2