diff --git a/CHANGELOG.md b/CHANGELOG.md
index a17fbf8f06385677eb05801b422998bb6613b9ea..3150ce35fcc7c1c6fe5c38eedcd90f56a1d6a828 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,11 @@ Changelog
 
 All notable changes to this project will be documented in this file.
 
+## [2.9.4] - 2020-02-27
+### Security
+
+- Fix leak of arbitrary statuses through unfavourite action in REST API ([Gargron](https://github.com/tootsuite/mastodon/pull/13161))
+
 ## [2.9.3] - 2019-08-10
 ### Added
 
diff --git a/lib/mastodon/version.rb b/lib/mastodon/version.rb
index 99d709c980da5b516829314b91c727e0181c4de1..65a50edcd7e8c1b54e8609c0258ba7a22ccd618a 100644
--- a/lib/mastodon/version.rb
+++ b/lib/mastodon/version.rb
@@ -13,7 +13,7 @@ module Mastodon
     end
 
     def patch
-      3
+      4
     end
 
     def flags