diff --git a/.gitignore b/.gitignore
index 8d30399..0428d65 100644
--- a/.gitignore
+++ b/.gitignore
@@ -193,3 +193,4 @@
 /389-ds-base-1.4.3.5.tar.bz2
 /389-ds-base-1.4.3.6.tar.bz2
 /389-ds-base-1.4.3.7.tar.bz2
+/389-ds-base-1.4.3.8.tar.bz2
diff --git a/389-ds-base.spec b/389-ds-base.spec
index 13b7ecf..407cc3c 100644
--- a/389-ds-base.spec
+++ b/389-ds-base.spec
@@ -44,7 +44,7 @@ ExcludeArch: i686
 
 Summary:          389 Directory Server (base)
 Name:             389-ds-base
-Version:          1.4.3.7
+Version:          1.4.3.8
 Release:          %{?relprefix}1%{?prerel}%{?dist}
 License:          GPLv3+
 URL:              https://www.port389.org
@@ -777,14 +777,28 @@ exit 0
 %doc README.md
 
 %changelog
-* Wed Apr 22 2020 Mark Reynolds <mreynolds@redhat.com> -1.4.3.7-1
+* Fri May 8 2020 Mark Reynolds <mreynolds@redhat.com> - 1.4.3.8-1
+- Bump version to 1.4.3.8
+- Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
+- Issue 51054 - Revise ACI target syntax checking
+- Issue 51068 - deadlock when updating the schema
+- Issue 51060 - unable to set sslVersionMin to TLS1.0
+- Issue 51064 - Unable to install server where IPv6 is disabled
+- Issue 51051 - CLI fix consistency issues with confirmations
+- Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
+- Issue 51054 - AddressSanitizer: heap-buffer-overflow in ldap_utf8prev
+- Issue 51047 - React deprecating ComponentWillMount
+- Issue 50499 - fix npm audit issues
+- Issue 50545 - Port dbgen.pl to dsctl
+
+* Wed Apr 22 2020 Mark Reynolds <mreynolds@redhat.com> - 1.4.3.7-1
 - Bump version to 1.4.3.7
 - Issue 51024 - syncrepl_entry callback does not contain attributes added by postoperation plugins
 - Issue 51035 - Heavy StartTLS connection load can randomly fail with err=1
 - Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
 - Issue 51031 - UI - transition between two instances needs improvement
 
-* Thu Apr 16 2020 Mark Reynolds <mreynolds@redhat.com> -1.4.3.6-1
+* Thu Apr 16 2020 Mark Reynolds <mreynolds@redhat.com> - 1.4.3.6-1
 - Bump version to 1.4.3.6
 - Issue 50933 - 10rfc2307compat.ldif is not ready to set used by default
 - Issue 50931 - RFE AD filter rewriter for ObjectCategory
diff --git a/sources b/sources
index 496e1d7..f8645c2 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
-SHA512 (389-ds-base-1.4.3.7.tar.bz2) = 0b86a303d428831a66da9b3a7198f548cac243970d65f4a67c32e82b16ac0a3d52d59ed881f19e9067922a100d709cdebedfffcd10aac5a326bf8b7c5cd6dcf6
+SHA512 (389-ds-base-1.4.3.8.tar.bz2) = 31b69c85a4c346a5516e94b28af34154c654b2c2c395e503a5462bd553b4168688fccf652f2b6e7046c4805c665cc6a55d097c7d4af59e4ea2f240c3ca27a2ef
 SHA512 (jemalloc-5.2.1.tar.bz2) = 0bbb77564d767cef0c6fe1b97b705d368ddb360d55596945aea8c3ba5889fbce10479d85ad492c91d987caacdbbdccc706aa3688e321460069f00c05814fae02