diff --git a/CHANGELOG.md b/CHANGELOG.md
index 43f1c300c..66a2fae55 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -5,6 +5,8 @@ The format is based on [Keep a Changelog](http://keepachangelog.com/)
 and this project adheres to [Semantic Versioning](http://semver.org/).
 
 ## [Unreleased]
+
+## [0.4.4] - 2019-01-30
 ## Added
 - Full-stack verification of blob hashes and descriptor sizes is now done on
   all operations, improving our hardening against bad blobs (we already did
@@ -386,7 +388,8 @@ and this project adheres to [Semantic Versioning](http://semver.org/).
   + `repack`
   + `config`
 
-[Unreleased]: https://github.com/openSUSE/umoci/compare/v0.4.3...HEAD
+[Unreleased]: https://github.com/openSUSE/umoci/compare/v0.4.4...HEAD
+[0.4.4]: https://github.com/openSUSE/umoci/compare/v0.4.3...v0.4.4
 [0.4.3]: https://github.com/openSUSE/umoci/compare/v0.4.2...v0.4.3
 [0.4.2]: https://github.com/openSUSE/umoci/compare/v0.4.1...v0.4.2
 [0.4.1]: https://github.com/openSUSE/umoci/compare/v0.4.0...v0.4.1
diff --git a/VERSION b/VERSION
index dd8a06396..6f2743d65 100644
--- a/VERSION
+++ b/VERSION
@@ -1 +1 @@
-0.4.3+dev
+0.4.4