diff --git a/ChangeLog b/ChangeLog
index 77126a9c..e81fc951 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,7 +1,11 @@
- * On 2.5.x HTTPD versions, when flow control to the client blocks, needing
-   a WINDOW_UPDATE to make further progress, HTTP/2 connection processing
-   returns to the MPM. This improves parallel connection handling with
-   "slow" clients in the event MPM.
+v2.0.28
+--------------------------------------------------------------------------------
+ * When HTTP/2 flow controls blocks further writes, return processing to an
+   async mpm to free a worker thread. The connection needs window updates from
+   the client in such a case and can leave monitoring the socket to the mpm.
+   So far, only effective on Apache httpd 2.5.0 (trunk).
+   [ylavic, icing]
+ * Backport fix of CVE-2024-36387 from Apache 2.4.60.
 
 v2.0.27
 --------------------------------------------------------------------------------
diff --git a/configure.ac b/configure.ac
index 547dd76f..a3a50022 100644
--- a/configure.ac
+++ b/configure.ac
@@ -12,7 +12,7 @@
 #
 
 AC_PREREQ([2.69])
-AC_INIT([mod_http2], [2.0.27], [stefan@eissing.org])
+AC_INIT([mod_http2], [2.0.28], [stefan@eissing.org])
 
 LT_PREREQ([2.2.6])
 LT_INIT()
diff --git a/mod_http2/h2_version.h b/mod_http2/h2_version.h
index 5296d048..8faf841d 100644
--- a/mod_http2/h2_version.h
+++ b/mod_http2/h2_version.h
@@ -27,7 +27,7 @@
  * @macro
  * Version number of the http2 module as c string
  */
-#define MOD_HTTP2_VERSION "2.0.27-git"
+#define MOD_HTTP2_VERSION "2.0.28-git"
 
 /**
  * @macro
@@ -35,7 +35,7 @@
  * release. This is a 24 bit number with 8 bits for major number, 8 bits
  * for minor and 8 bits for patch. Version 1.2.3 becomes 0x010203.
  */
-#define MOD_HTTP2_VERSION_NUM 0x02001b
+#define MOD_HTTP2_VERSION_NUM 0x02001c
 
 
 #endif /* mod_h2_h2_version_h */