diff --git a/.gitignore b/.gitignore
index 2934447..480a7d7 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,3 +1,3 @@
-SOURCES/kernel-rt-3.10.0-327.28.2.rt56.234.tar.xz
+SOURCES/kernel-rt-3.10.0-327.28.3.rt56.235.tar.xz
 SOURCES/rheldup3.x509
 SOURCES/rhelkpatch1.x509
diff --git a/.kernel-rt.metadata b/.kernel-rt.metadata
index 7283fa5..8f3c05f 100644
--- a/.kernel-rt.metadata
+++ b/.kernel-rt.metadata
@@ -1,3 +1,3 @@
-07a172a413e5a1e238f4450a0eb3ba71ff0a82a5 SOURCES/kernel-rt-3.10.0-327.28.2.rt56.234.tar.xz
+6be14d1d6f7860836f9a20e9e152a3348a37a99b SOURCES/kernel-rt-3.10.0-327.28.3.rt56.235.tar.xz
 95b9b811c7b0a6c98b2eafc4e7d6d24f2cb63289 SOURCES/rheldup3.x509
 d90885108d225a234a5a9d054fc80893a5bd54d0 SOURCES/rhelkpatch1.x509
diff --git a/SPECS/kernel-rt.spec b/SPECS/kernel-rt.spec
index 403948d..b6b9200 100644
--- a/SPECS/kernel-rt.spec
+++ b/SPECS/kernel-rt.spec
@@ -1,17 +1,15 @@
 Summary: The Linux Realtime kernel
 
-# catch building on Fedora
-%if "%{?dist}" == "" || "0%{?fedora}" != "0"
-%global dist .el7_2
-%endif
+# Force dist as .el7 to override the buildsystem preference
+%global dist .el7
 
 %global __spec_install_pre %{___build_pre}
 
 # realtimeN
-%global rtbuild 234
+%global rtbuild 235
 
 # RHEL7 build number
-%global rhel_build 327.28.2
+%global rhel_build 327.28.3
 
 # The preempt RT patch lev2l
 %global rttag rt56
@@ -1490,6 +1488,11 @@ fi
 %endif
 
 %changelog
+* Mon Aug 15 2016 Luis Claudio R. Goncalves <lgoncalv@redhat.com> [3.10.0-327.28.3.rt56.235.el7]
+- [rt] kernel-3.10.0-327.28.3.el7 [1350307]
+- [rt] use .el7 as the kernel sufix (instead of .el7_2) [1350307]
+- [net] fix challenge ACK counter information disclosure [1355618] {CVE-2016-5696}
+
 * Fri Jul 22 2016 Luis Claudio R. Goncalves <lgoncalv@redhat.com> [3.10.0-327.28.2.rt56.234.el7_2]
 - [rhel-rt] config: enable RCU_NOCB_CPU_ALL [1349770]