diff --git a/openssl/CHANGELOG.md b/openssl/CHANGELOG.md
index c6419ae2844ac180c3f87131626dd3904943a13d..a4c7d93de355db7a6519b04e85ac8efc764e0280 100644
--- a/openssl/CHANGELOG.md
+++ b/openssl/CHANGELOG.md
@@ -2,6 +2,13 @@
 
 ## [Unreleased]
 
+## [v0.10.28] - 2020-02-04
+
+### Fixed
+
+* Fixed the mutability of `Signer::sign_oneshot` and `Verifier::verify_oneshot`. This is unfortunately a breaking
+    change, but a necessary soundness fix.
+
 ## [v0.10.27] - 2020-01-29
 
 ### Added
@@ -423,7 +430,8 @@
 
 Look at the [release tags] for information about older releases.
 
-[Unreleased]: https://github.com/sfackler/rust-openssl/compare/openssl-v0.10.27...master
+[Unreleased]: https://github.com/sfackler/rust-openssl/compare/openssl-v0.10.28...master
+[v0.10.28]: https://github.com/sfackler/rust-openssl/compare/openssl-v0.10.27...openssl-v0.10.28
 [v0.10.27]: https://github.com/sfackler/rust-openssl/compare/openssl-v0.10.26...openssl-v0.10.27
 [v0.10.26]: https://github.com/sfackler/rust-openssl/compare/openssl-v0.10.25...openssl-v0.10.26
 [v0.10.25]: https://github.com/sfackler/rust-openssl/compare/openssl-v0.10.24...openssl-v0.10.25
diff --git a/openssl/Cargo.toml b/openssl/Cargo.toml
index a5e6cad7f61ce8347aa0e6ca66e0c383e5706b62..23d422f1525e04d17a2daa5624877d1db8b4f2fa 100644
--- a/openssl/Cargo.toml
+++ b/openssl/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "openssl"
-version = "0.10.27"
+version = "0.10.28"
 authors = ["Steven Fackler <sfackler@gmail.com>"]
 license = "Apache-2.0"
 description = "OpenSSL bindings"