diff --git a/.gitignore b/.gitignore
index f056823..5acd1a9 100644
--- a/.gitignore
+++ b/.gitignore
@@ -170,3 +170,5 @@ bind-9.7.2b1.tar.gz
 /bind-9.16.26.tar.xz.asc
 /bind-9.16.27.tar.xz
 /bind-9.16.27.tar.xz.asc
+/bind-9.16.28.tar.xz
+/bind-9.16.28.tar.xz.asc
diff --git a/bind.spec b/bind.spec
index 0573368..13e4997 100644
--- a/bind.spec
+++ b/bind.spec
@@ -52,7 +52,7 @@
 Summary:  The Berkeley Internet Name Domain (BIND) DNS (Domain Name System) server
 Name:     bind
 License:  MPLv2.0
-Version:  9.16.27
+Version:  9.16.28
 Release:  1%{?dist}
 Epoch:    32
 Url:      https://www.isc.org/downloads/bind/
@@ -1115,6 +1115,9 @@ fi;
 %endif
 
 %changelog
+* Wed Apr 20 2022 Petr Menšík <pemensik@redhat.com> - 32:9.16.28-1
+- Update to 9.16.28 (#2076941)
+
 * Thu Mar 17 2022 Petr Menšík <pemensik@redhat.com> - 32:9.16.27-1
 - Upgrade to 9.16.27 (#2055120)
 
diff --git a/sources b/sources
index 7da9ce4..8d1fcc3 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
-SHA512 (bind-9.16.27.tar.xz) = 5c71f228db83aa8cc9e65466d6e5afca4a9f80c693358111a003fe09e1a14522175eb2b6a0f11e2a2cd4fdba01f2ae315de52e394a441b3861ca2a011e02af62
-SHA512 (bind-9.16.27.tar.xz.asc) = 5df05d9a4f2425807e8f01c45fb707ddbaa3bcce76512dac87a681f8fd0dba96ad6346311984bfab1a45152cb47252219024d9fc58f85a2b2adf6ad9b0eab7f7
+SHA512 (bind-9.16.28.tar.xz) = 7314c039b6d61b90e7f7c6d4465a26b214de67272116e334b8a3e2551b1d66c028819024ec819676c1cc66e6bf81f17890239bb48e4c40f9d6cea35f025976d3
+SHA512 (bind-9.16.28.tar.xz.asc) = f0461c6764054108c78161e6ef4582559a6ee5fa81d609fb35234022ac0970f712021037c7d94cfc4ad8c5b6a823d5129a7b95fe88c6af31b657683f5b5349ec