diff --git a/CHANGES.md b/CHANGES.md
index 4d210b96c5e02c429f8fad66f5b5a75df815837f..b44248e26414e4d35492caa63102c51e1c489b70 100644
--- a/CHANGES.md
+++ b/CHANGES.md
@@ -1,3 +1,9 @@
+Synapse 1.20.0rc4 (2020-09-16)
+==============================
+
+Synapse 1.20.0rc4 is identical to 1.20.0rc3, with the addition of the security fix that was included in 1.19.2.
+
+
 Synapse 1.19.2 (2020-09-16)
 ===========================
 
@@ -8,6 +14,7 @@ Bugfixes
 
 - Fix joining rooms over federation that include malformed events. ([\#8324](https://github.com/matrix-org/synapse/issues/8324))
 
+
 Synapse 1.20.0rc3 (2020-09-11)
 ==============================
 
diff --git a/synapse/__init__.py b/synapse/__init__.py
index bf0bf192a56aae392cf04f4bc2ddc7a287b47038..6b11c5681bee41ce28ad551f3758a0395182d11b 100644
--- a/synapse/__init__.py
+++ b/synapse/__init__.py
@@ -48,7 +48,7 @@ try:
 except ImportError:
     pass
 
-__version__ = "1.20.0rc3"
+__version__ = "1.20.0rc4"
 
 if bool(os.environ.get("SYNAPSE_TEST_PATCH_LOG_CONTEXTS", False)):
     # We import here so that we don't have to install a bunch of deps when