diff --git a/neon.spec b/neon.spec
index 564e97f..14aa193 100644
--- a/neon.spec
+++ b/neon.spec
@@ -1,7 +1,7 @@
 Summary: An HTTP and WebDAV client library
 Name: neon
-Version: 0.28.2
-Release: 2
+Version: 0.28.3
+Release: 1%{?dist}
 License: LGPLv2+
 Group: System Environment/Libraries
 URL: http://www.webdav.org/neon/
@@ -76,6 +76,9 @@ rm -rf $RPM_BUILD_ROOT
 %{_libdir}/*.so
 
 %changelog
+* Thu Aug 28 2008 Joe Orton <jorton@redhat.com> 0.28.3-1
+- update to 0.28.3 (CVE-2008-3746, #460415)
+
 * Thu Apr  3 2008 Joe Orton <jorton@redhat.com> 0.28.2-2
 - update to 0.28.2
 
diff --git a/sources b/sources
index 259343b..eb56e30 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-b99b3f44e8507ae2d17362f1b34aaf02  neon-0.28.2.tar.gz
+47599a328862ce64ac3c52726d6daa12  neon-0.28.3.tar.gz
diff --git a/upstream b/upstream
index f468ffc..a5d5d1d 100644
--- a/upstream
+++ b/upstream
@@ -1 +1 @@
-neon-0.28.2.tar.gz
+neon-0.28.3.tar.gz