diff --git a/neon-0.28.3.tar.bz2 b/neon-0.28.3.tar.bz2
deleted file mode 100644
index 9227800..0000000
--- a/neon-0.28.3.tar.bz2
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:555aa115489cd70741f2613704fb85cd24dade4d0b4ddc5940e78dbaa1b1dfb6
-size 592553
diff --git a/neon-0.28.3-bloat.patch b/neon-0.28.4-bloat.patch
similarity index 100%
rename from neon-0.28.3-bloat.patch
rename to neon-0.28.4-bloat.patch
diff --git a/neon-0.28.4.tar.bz2 b/neon-0.28.4.tar.bz2
new file mode 100644
index 0000000..4375411
--- /dev/null
+++ b/neon-0.28.4.tar.bz2
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:3af8a792fd42b15317e2fe49dd916f4173b41f0144eac22db044ac83ace77f1b
+size 607942
diff --git a/neon.changes b/neon.changes
index 3c0b8be..d71c613 100644
--- a/neon.changes
+++ b/neon.changes
@@ -1,3 +1,15 @@
+-------------------------------------------------------------------
+Thu May  7 13:47:31 CEST 2009 - prusnak@suse.cz
+
+- updated to 0.28.4
+  * GnuTLS support fixes:
+    - fix handling of PKCS#12 client certs with multiple certs or keys
+    - fix crash with OpenPGP certificate
+    - use pkg-config data in configure, in preference to libgnutls-config
+  * Add PKCS#11 support for OpenSSL builds (where pakchois is available)
+  * Fix small memory leak in PKCS#11 code
+- enabled kerberos support (by adding krb5-devel to BuildRequires)
+
 -------------------------------------------------------------------
 Wed Jan  7 12:34:56 CET 2009 - olh@suse.de
 
diff --git a/neon.spec b/neon.spec
index 527d17a..27f400c 100644
--- a/neon.spec
+++ b/neon.spec
@@ -1,5 +1,5 @@
 #
-# spec file for package neon (Version 0.28.3)
+# spec file for package neon (Version 0.28.4)
 #
 # Copyright (c) 2009 SUSE LINUX Products GmbH, Nuernberg, Germany.
 #
@@ -19,10 +19,10 @@
 
 
 Name:           neon
-BuildRequires:  libexpat-devel libopenssl-devel openssl zlib-devel
+BuildRequires:  krb5-devel libexpat-devel libopenssl-devel zlib-devel
 Summary:        An HTTP and WebDAV Client Library
-Version:        0.28.3
-Release:        10
+Version:        0.28.4
+Release:        1
 License:        LGPL v2.1 or later
 # bug437293
 %ifarch ppc64
@@ -205,6 +205,15 @@ rm -rf $RPM_BUILD_ROOT
 %{_libdir}/pkgconfig/neon.pc
 
 %changelog
+* Thu May 07 2009 prusnak@suse.cz
+- updated to 0.28.4
+  * GnuTLS support fixes:
+    - fix handling of PKCS#12 client certs with multiple certs or keys
+    - fix crash with OpenPGP certificate
+    - use pkg-config data in configure, in preference to libgnutls-config
+  * Add PKCS#11 support for OpenSSL builds (where pakchois is available)
+  * Fix small memory leak in PKCS#11 code
+- enabled kerberos support (by adding krb5-devel to BuildRequires)
 * Wed Jan 07 2009 olh@suse.de
 - obsolete old -XXbit packages (bnc#437293)
 * Thu Aug 21 2008 prusnak@suse.cz
@@ -273,7 +282,7 @@ rm -rf $RPM_BUILD_ROOT
 - version 0.27.2
   * Fix crash in GSSAPI Negotiate response header verification.
 - Cleanup excessive dependencies on -devel package.
-* Thu Oct 11 2007 ro@suse.de
+* Fri Oct 12 2007 ro@suse.de
 - add provides/obsoletes for neon-devel in libneon-devel
   after package rename
 * Tue Sep 25 2007 prusnak@suse.cz