diff --git a/kernel.spec b/kernel.spec
index baf47ff8f..a7326612f 100644
--- a/kernel.spec
+++ b/kernel.spec
@@ -38,10 +38,10 @@
 # define buildid .local
 
 %define specversion 4.18.0
-%define pkgrelease 553.27.1.el8_10
+%define pkgrelease 553.28.1.el8_10
 
 # allow pkg_release to have configurable %%{?dist} tag
-%define specrelease 553.27.1%{?dist}
+%define specrelease 553.28.1%{?dist}
 
 %define pkg_release %{specrelease}%{?buildid}
 
@@ -2696,6 +2696,18 @@ fi
 #
 #
 %changelog
+* Thu Oct 31 2024 Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.28.1.el8_10]
+- s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702]
+- smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400]
+- smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400]
+- cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400]
+- Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991]
+- gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann)
+- x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709]
+- audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004]
+- KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999]
+- raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263]
+
 * Thu Oct 17 2024 Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.27.1.el8_10]
 - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668}
 - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989}
diff --git a/sources b/sources
index 6eb596399..1dd30dd27 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-SHA512 (linux-4.18.0-553.27.1.el8_10.tar.xz) = 84ff193761ebf620f8b64e626cb716b78d395361f58c825dd7839ea45f781e91c97083c01be3462c6d4125fc76249d758fc7284f752d62f65e493d68fbf2daf0
-SHA512 (kernel-abi-stablelists-4.18.0-553.tar.bz2) = cbd22d0f1051f34f2c7d62306e2cebb34139e7ef27cebccc645e3b668a385eea12f0c1e0d9b59a9da06451c82ca9520d711687fea10863756375fa138e3f78f5
+SHA512 (linux-4.18.0-553.28.1.el8_10.tar.xz) = 021370af7bd90020ab16d62caac694bca3c69d10c1936cf9870a19daa68de83865f6f5e6dd494f5a724384e83ef8b269f2c044b4a608068c693bbb64b762ef21
+SHA512 (kernel-abi-stablelists-4.18.0-553.tar.bz2) = 0babdeb9abc69a7be29578b58ee7f8e33711770f37dff40095bab57c6b74d92a33af8d64bf576caf241367a492045c58d6e23d02e0edab157f68d38c2c7e08a1
 SHA512 (kernel-kabi-dw-4.18.0-553.tar.bz2) = 8a671ed3c9b7f4b25fd4e594b62bc4a26474cb705d3ed22ca376618b3c7962fc72ace1ffd02c9c3a192d9d2c449d38228809542d7f16ebad16f8127020eb2faf