diff --git a/.changelog/5421.internal.md b/.changelog/5421.internal.md
deleted file mode 100644
index af5cf401a26..00000000000
--- a/.changelog/5421.internal.md
+++ /dev/null
@@ -1 +0,0 @@
-Install setuptools to make Towncrier fork work with Python 3.12
diff --git a/.changelog/5422.trivial.md b/.changelog/5422.trivial.md
deleted file mode 100644
index e69de29bb2d..00000000000
diff --git a/.changelog/5423.bugfix.md b/.changelog/5423.bugfix.md
deleted file mode 100644
index 9313cfc25cb..00000000000
--- a/.changelog/5423.bugfix.md
+++ /dev/null
@@ -1,4 +0,0 @@
-go/consensus: Do not crash on nil result from Commit
-
-The Commit function can return both a nil error and a nil result in case
-the given block is not available yet.
diff --git a/.changelog/5426.bugfix.md b/.changelog/5426.bugfix.md
deleted file mode 100644
index 5169c6d5843..00000000000
--- a/.changelog/5426.bugfix.md
+++ /dev/null
@@ -1 +0,0 @@
-go/worker/compute/executor: Clear channels when not in the committee
diff --git a/.changelog/5427.feature.md b/.changelog/5427.feature.md
deleted file mode 100644
index 924f004cae5..00000000000
--- a/.changelog/5427.feature.md
+++ /dev/null
@@ -1,7 +0,0 @@
-config: add option to override internal unix socket path
-
-Previously the UNIX socket path could only be overriden via a debug option
-which also required the general "don't blame Oasis" to be set. Since this
-option can be generally useful in production environments it is now supported
-in the config file. The socket path can be set under
-`common.internal_socket_path`, and is not considered a debug option anymore.
diff --git a/.changelog/5433.bugfix.md b/.changelog/5433.bugfix.md
deleted file mode 100644
index e0c551d0160..00000000000
--- a/.changelog/5433.bugfix.md
+++ /dev/null
@@ -1,10 +0,0 @@
-go/runtime/host/multi: Propagate special requests to next version
-
-Previously periodic consensus sync requests were not propagated to the
-next (e.g. upcoming) runtime version. This could result in the runtime's
-consensus view going stale which would make the attestations too old so
-they would be rejected during scheduling.
-
-Additionally, key manager update requests should also be propagated to
-ensure the runtime is ready immediately when activated, avoiding any
-potential race conditions.
diff --git a/.punch_version.py b/.punch_version.py
index f34e2850de7..42c8b12965d 100644
--- a/.punch_version.py
+++ b/.punch_version.py
@@ -1,3 +1,3 @@
 year = '23'
 minor = 0
-micro = 2
+micro = 3
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 03410189c56..ad90e1bad57 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -12,6 +12,53 @@ The format is inspired by [Keep a Changelog].
 
 <!-- TOWNCRIER -->
 
+## 23.0.3 (2023-11-08)
+
+| Protocol          | Version   |
+|:------------------|:---------:|
+| Consensus         | 7.0.0     |
+| Runtime Host      | 5.1.0     |
+| Runtime Committee | 5.0.0     |
+
+### Features
+
+- config: add option to override internal unix socket path
+  ([#5427](https://github.com/oasisprotocol/oasis-core/issues/5427))
+
+  Previously the UNIX socket path could only be overriden via a debug option
+  which also required the general "don't blame Oasis" to be set. Since this
+  option can be generally useful in production environments it is now supported
+  in the config file. The socket path can be set under
+  `common.internal_socket_path`, and is not considered a debug option anymore.
+
+### Bug Fixes
+
+- go/consensus: Do not crash on nil result from Commit
+  ([#5423](https://github.com/oasisprotocol/oasis-core/issues/5423))
+
+  The Commit function can return both a nil error and a nil result in case
+  the given block is not available yet.
+
+- go/worker/compute/executor: Clear channels when not in the committee
+  ([#5426](https://github.com/oasisprotocol/oasis-core/issues/5426))
+
+- go/runtime/host/multi: Propagate special requests to next version
+  ([#5433](https://github.com/oasisprotocol/oasis-core/issues/5433))
+
+  Previously periodic consensus sync requests were not propagated to the
+  next (e.g. upcoming) runtime version. This could result in the runtime's
+  consensus view going stale which would make the attestations too old so
+  they would be rejected during scheduling.
+
+  Additionally, key manager update requests should also be propagated to
+  ensure the runtime is ready immediately when activated, avoiding any
+  potential race conditions.
+
+### Internal Changes
+
+- Install setuptools to make Towncrier fork work with Python 3.12
+  ([#5421](https://github.com/oasisprotocol/oasis-core/issues/5421))
+
 ## 23.0.2 (2023-10-22)
 
 | Protocol          | Version   |