diff --git a/CHANGELOG.md b/CHANGELOG.md
index a17fbf8f06..3150ce35fc 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,11 @@ Changelog
 
 All notable changes to this project will be documented in this file.
 
+## [2.9.4] - 2020-02-27
+### Security
+
+- Fix leak of arbitrary statuses through unfavourite action in REST API ([Gargron](https://github.com/tootsuite/mastodon/pull/13161))
+
 ## [2.9.3] - 2019-08-10
 ### Added
 
diff --git a/lib/mastodon/version.rb b/lib/mastodon/version.rb
index 99d709c980..65a50edcd7 100644
--- a/lib/mastodon/version.rb
+++ b/lib/mastodon/version.rb
@@ -13,7 +13,7 @@ module Mastodon
     end
 
     def patch
-      3
+      4
     end
 
     def flags