diff --git a/CHANGELOG-2.3.md b/CHANGELOG-2.3.md
index 675302718a..f36a265ebc 100644
--- a/CHANGELOG-2.3.md
+++ b/CHANGELOG-2.3.md
@@ -7,6 +7,25 @@ in 2.3 minor versions.
 To get the diff for a specific change, go to https://github.com/symfony/symfony/commit/XXX where XXX is the change hash
 To get the diff between two versions, go to https://github.com/symfony/symfony/compare/v2.3.0...v2.3.1
 
+* 2.3.28 (2015-05-10)
+
+ * bug #14266 [HttpKernel] Check if "symfony/proxy-manager-bridge" package is installed (hason)
+ * bug #14501 [ProxyBridge] Fix proxy classnames generation (xphere)
+ * bug #14498 [FrameworkBundle] Added missing log in server:run command (lyrixx)
+ * bug #14484 [SecurityBundle][WebProfiler] check authenticated user by tokenClass instead of username. (aitboudad)
+ * bug #14497 [HttpFoundation] Allow curly braces in trusted host patterns (sgrodzicki)
+ * bug #14436 Show a better error when the port is in use (dosten)
+ * bug #14463 [Validator] Fixed Choice when an empty array is used in the "choices" option (webmozart)
+ * bug #14402 [FrameworkBundle][Translation] Check for 'xlf' instead of 'xliff' (xelaris)
+ * bug #14272 [FrameworkBundle] Workaround php -S ignoring auto_prepend_file (nicolas-grekas)
+ * bug #14345 [FrameworkBundle] Fix Routing\DelegatingLoader resiliency to fatal errors (nicolas-grekas)
+ * bug #14325 [Routing][DependencyInjection] Support .yaml extension in YAML loaders (thunderer)
+ * bug #14344 [Translation][fixed test] refresh cache when resources are no longer fresh. (aitboudad)
+ * bug #14268 [Translator] Cache does not take fallback locales into consideration (sf2.3) (mpdude)
+ * bug #14192 [HttpKernel] Embed the original exception as previous to bounced exceptions (nicolas-grekas)
+ * bug #14102 [Enhancement] netbeans - force interactive shell when limited detection (cordoval)
+ * bug #14191 [StringUtil] Fixed singularification of 'movies' (GerbenWijnja)
+
 * 2.3.27 (2015-04-01)
 
  * security #14167 CVE-2015-2308 (nicolas-grekas)