diff --git a/perl-YAML.spec b/perl-YAML.spec
index eb1f423..c000c87 100644
--- a/perl-YAML.spec
+++ b/perl-YAML.spec
@@ -12,8 +12,8 @@
 %endif
 
 Name:           perl-YAML
-Version:        1.27
-Release:        2%{?dist}
+Version:        1.28
+Release:        1%{?dist}
 Summary:        YAML Ain't Markup Language (tm)
 License:        GPL+ or Artistic
 URL:            https://metacpan.org/release/YAML
@@ -75,10 +75,11 @@ information on the YAML syntax, please refer to the YAML specification.
 
 %build
 perl Makefile.PL INSTALLDIRS=vendor NO_PACKLIST=1 NO_PERLLOCAL=1
-make %{?_smp_mflags}
+%{make_build}
 
 %install
-make install DESTDIR=%{buildroot}
+%{make_install}
+%{_fixperms} -c %{buildroot}
 
 %check
 # Avoid circular build deps Test::YAML → Test::Base → YAML when bootstrapping
@@ -128,6 +129,11 @@ make test AUTHOR_TESTING=%{with perl_YAML_enables_extra_test}
 %{_mandir}/man3/YAML::Types.3*
 
 %changelog
+* Sun Apr 28 2019 Paul Howarth <paul@city-fan.org> - 1.28-1
+- Update to 1.28
+  - Security fix: only enable loading globs when $LoadCode is set (GH#213)
+- Modernize spec using %%{make_build} and %%{make_install}
+
 * Sat Feb 02 2019 Fedora Release Engineering <releng@fedoraproject.org> - 1.27-2
 - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
 
diff --git a/sources b/sources
index 4afa0a0..ba313b4 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (YAML-1.27.tar.gz) = f82de359939f139211df1c63226a17c0ecb00833c8e72986e901507626ef19f3bb3dd7678c83abb9aeb8857ca921e7698e2c0cb0620de5e4a8d3b963ee040e66
+SHA512 (YAML-1.28.tar.gz) = a3adfa5c7e6660224549c68839f6fe9daff1315ec34f7ecd24a83a1a4f1207a769197196511344753901ed5cc2addc4799f408ffd01ce990a1c94352e58b9ff1