diff --git a/.gitignore b/.gitignore
index 9031713..c3df8b9 100644
--- a/.gitignore
+++ b/.gitignore
@@ -164,3 +164,4 @@
 /389-ds-base-1.3.8.6.tar.bz2
 /389-ds-base-1.3.8.7.tar.bz2
 /389-ds-base-1.3.8.8.tar.bz2
+/389-ds-base-1.3.8.9.tar.bz2
diff --git a/389-ds-base.spec b/389-ds-base.spec
index ddc1aa8..92caa76 100644
--- a/389-ds-base.spec
+++ b/389-ds-base.spec
@@ -29,10 +29,10 @@
 
 Summary:          389 Directory Server (base)
 Name:             389-ds-base
-Version:          1.3.8.8
+Version:          1.3.8.9
 Release:          %{?relprefix}1%{?prerel}%{?dist}
 License:          GPLv3+
-URL:              http://www.port389.org
+URL:              https://www.port389.org
 Group:            System Environment/Daemons
 BuildRoot:        %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
 Conflicts:        selinux-policy-base < 3.9.8
@@ -527,6 +527,13 @@ fi
 %endif
 
 %changelog
+* Tue Oct 9 2018 Mark Reynolds <mreynolds@redhat.com> - 1.3.8.9-1
+- Bump version to 1.3.8.9
+- Ticket 49969 - DOS caused by malformed search operation (security fix)
+- Ticket 49954 - On s390x arch retrieved DB page size is stored as size_t rather than uint32_t
+- Ticket 49937 - Log buffer exceeded emergency logging msg is not thread-safe (security fix)
+- Ticket 49932 - Crash in delete_passwdPolicy when persistent search connections are terminated unexpectedly
+
 * Fri Aug 24 2018 Mark Reynolds <mreynolds@redhat.com> - 1.3.8.8-1
 - Bump version to 1.3.8.8
 - Revert "Ticket 49372 - filter optimisation improvements for common queries"
diff --git a/sources b/sources
index 022f0d3..afa474c 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (389-ds-base-1.3.8.8.tar.bz2) = 632456d318282a849f20e4423561825b09fee53f2471898ed787421a3e9aeb3639ad2c5562ee2389f034e07138eb936db8ca1f56f5ff210da32690407ffa3db8
+SHA512 (389-ds-base-1.3.8.9.tar.bz2) = 2f07fa3786ad134afe702bac3c28ae3e6bdf5b944f95ff343e5310a3425ecb81e37b5c2d7fa51066caf2e10a5ffab2ad80f46468fa8e008e36931d0a9d6b8401