diff --git a/.gitignore b/.gitignore
index 0428d65..fdba5dd 100644
--- a/.gitignore
+++ b/.gitignore
@@ -194,3 +194,4 @@
 /389-ds-base-1.4.3.6.tar.bz2
 /389-ds-base-1.4.3.7.tar.bz2
 /389-ds-base-1.4.3.8.tar.bz2
+/389-ds-base-1.4.3.9.tar.bz2
diff --git a/389-ds-base.spec b/389-ds-base.spec
index 407cc3c..6f8a6fd 100644
--- a/389-ds-base.spec
+++ b/389-ds-base.spec
@@ -44,7 +44,7 @@ ExcludeArch: i686
 
 Summary:          389 Directory Server (base)
 Name:             389-ds-base
-Version:          1.4.3.8
+Version:          1.4.3.9
 Release:          %{?relprefix}1%{?prerel}%{?dist}
 License:          GPLv3+
 URL:              https://www.port389.org
@@ -777,6 +777,24 @@ exit 0
 %doc README.md
 
 %changelog
+* Fri May 29 2020 Mark Reynolds <mreynolds@redhat.com> - 1.4.3.9-1
+- Bump version to 1.4.3.9
+- Issue 50931 - RFE AD filter rewriter for ObjectCategory
+- Issue 51113 - Allow using uid for replication manager entry
+- Issue 51095 - abort operation if CSN can not be generated
+- Issue 51110 - Fix ASAN ODR warnings
+- Issue 51102 - RFE - ds-replcheck - make online timeout configurable
+- Issue 51076 - remove unnecessary slapi entry dups
+- Issue 51086 - Improve dscreate instance name validation
+- Issue 50989 - ignore pid when it is ourself in protect_db
+- Issue 50499 - Fix some npm audit issues
+- Issue 51091 - healthcheck json report fails when mapping tree is deleted
+- Issue 51079 - container pid start and stop issues
+- Issue 50610 - Fix return code when it's nothing to free
+- Issue 51082 - abort when a empty valueset is freed
+- Issue 50610 - memory leaks in dbscan and changelog encryption
+- Issue 51076 - prevent unnecessarily duplication of the target entry
+
 * Fri May 8 2020 Mark Reynolds <mreynolds@redhat.com> - 1.4.3.8-1
 - Bump version to 1.4.3.8
 - Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
diff --git a/sources b/sources
index f8645c2..11aea68 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
-SHA512 (389-ds-base-1.4.3.8.tar.bz2) = 31b69c85a4c346a5516e94b28af34154c654b2c2c395e503a5462bd553b4168688fccf652f2b6e7046c4805c665cc6a55d097c7d4af59e4ea2f240c3ca27a2ef
+SHA512 (389-ds-base-1.4.3.9.tar.bz2) = f5e47282df7a4cb090d12894b8d85e71b4791e6a101de2b66e90d583e41d15efae4e2aa24c548fce576c130f0215ce16efcbac00a2d32dcc911ee2a19bd026eb
 SHA512 (jemalloc-5.2.1.tar.bz2) = 0bbb77564d767cef0c6fe1b97b705d368ddb360d55596945aea8c3ba5889fbce10479d85ad492c91d987caacdbbdccc706aa3688e321460069f00c05814fae02