diff --git a/docs/overview/changelog.md b/docs/overview/changelog.md
index b9507515a3..173c66cfca 100644
--- a/docs/overview/changelog.md
+++ b/docs/overview/changelog.md
@@ -222,6 +222,10 @@ downtime, and then upgrade to the new release.
 - Enabled webpack code splitting and deduplication.
 - Started migrating our frontend codebase to TypeScript.
 
+### 2.0.8 -- 2019-12-12
+
+- CVE-2019-19775: Close open redirect in thumbnail view.
+
 ### 2.0.7 -- 2019-11-21
 
 - CVE-2019-18933: Fix insecure account creation via social authentication.
diff --git a/version.py b/version.py
index cf2a7ca499..ad03580d3a 100644
--- a/version.py
+++ b/version.py
@@ -10,7 +10,7 @@ if os.path.exists(zulip_git_version_file):
             ZULIP_VERSION = version
 
 LATEST_MAJOR_VERSION = "2.0"
-LATEST_RELEASE_VERSION = "2.0.7"
+LATEST_RELEASE_VERSION = "2.0.8"
 LATEST_RELEASE_ANNOUNCEMENT = "https://blog.zulip.org/2019/03/01/zulip-2-0-released/"
 
 # Bump the minor PROVISION_VERSION to indicate that folks should provision