diff --git a/CHANGES.md b/CHANGES.md
index c9b6cba42..bb5149ec0 100644
--- a/CHANGES.md
+++ b/CHANGES.md
@@ -10,6 +10,16 @@
   - Windows (x86/amd64): <https://ci.appveyor.com/project/libgit2/libgit2sharp>
   - Linux/Mac OS X: <https://travis-ci.org/libgit2/libgit2sharp>
 
+## v0.25.3 - ([diff](https://github.com/libgit2/libgit2sharp/compare/v0.25.2..v0.25.3))
+
+This is a security release fixing a number of possible security issues,
+including hardening validation for submodule validation to help protect
+against CVE 2018-17456, and a number of possible errors found by fuzzing
+the libgit2 native library.
+
+This release includes [libgit2
+v0.27.5](https://github.com/libgit2/libgit2/releases/tag/v0.27.5).
+
 ## v0.25.1 - ([diff](https://github.com/libgit2/libgit2sharp/compare/v0.25..v0.25.1))
 
 This is a security release fixing insufficient validation of submodule
diff --git a/version.json b/version.json
index 8e1e46945..d067fdeec 100644
--- a/version.json
+++ b/version.json
@@ -1,6 +1,6 @@
 {
   "$schema": "https://raw.githubusercontent.com/AArnott/Nerdbank.GitVersioning/master/src/NerdBank.GitVersioning/version.schema.json",
-  "version": "0.25.2",
+  "version": "0.25.3",
   "publicReleaseRefSpec": [
     "^refs/heads/master$",                  // we release out of master
     "^refs/heads/maint/v\\d+(?:\\.\\d+)?$"  // and maint/vNN branches