diff --git a/docs/conf.py b/docs/conf.py
index 1606224fcc..8712592efb 100644
--- a/docs/conf.py
+++ b/docs/conf.py
@@ -52,7 +52,7 @@ author = 'The Zulip Team'
 # The short X.Y version.
 version = '2.0'
 # The full version, including alpha/beta/rc tags.
-release = '2.0.7'
+release = '2.0.8'
 
 # This allows us to insert a warning that appears only on an unreleased
 # version, e.g. to say that something is likely to have changed.
diff --git a/docs/overview/changelog.md b/docs/overview/changelog.md
index 0a7a679eaa..ebf59fb526 100644
--- a/docs/overview/changelog.md
+++ b/docs/overview/changelog.md
@@ -7,6 +7,10 @@ All notable changes to the Zulip server are documented in this file.
 This section lists notable unreleased changes; it is generally updated
 in bursts.
 
+### 2.0.8 -- 2019-12-12
+
+- CVE-2019-19775: Close open redirect in thumbnail view.
+
 ### 2.0.7 -- 2019-11-21
 
 - CVE-2019-18933: Fix insecure account creation via social authentication.
diff --git a/version.py b/version.py
index 664a07251e..c6f77e6f8f 100644
--- a/version.py
+++ b/version.py
@@ -1,6 +1,6 @@
-ZULIP_VERSION = "2.0.7"
+ZULIP_VERSION = "2.0.8"
 LATEST_MAJOR_VERSION = "2.0"
-LATEST_RELEASE_VERSION = "2.0.7"
+LATEST_RELEASE_VERSION = "2.0.8"
 LATEST_RELEASE_ANNOUNCEMENT = "https://blog.zulip.org/2019/03/01/zulip-2-0-released/"
 
 # Bump the minor PROVISION_VERSION to indicate that folks should provision