diff --git a/RELEASE-NOTES b/RELEASE-NOTES
index 2c3308b25..ce71b9c39 100644
--- a/RELEASE-NOTES
+++ b/RELEASE-NOTES
@@ -1,3 +1,22 @@
+# Release 4.0.3 - (Sep 11, 2020)
+ * PSBT: restore compatibility with Bitcoin Core following CVE-2020-14199:
+   we now allow a PSBT input to have both UTXO and WITNESS_UTXO (#6429).
+   (PSBTs created since 4.0.1 already contained UTXO for segwit inputs)
+ * Hardware wallets:
+   - bitbox02: better multisig UX: implement get_soft_device_id (#6386)
+   - coldcard: fix "show address" for multisig (#6517)
+   - all: run all device communication on a dedicated thread (#6561).
+     This should resolve some threading issues.
+ * new feature: "Automated BIP39 recovery" (#6219, #6155)
+   When restoring from a BIP39 seed, add option to scan many known
+   derivation paths for history, and show them to user to choose from.
+ * show derivation path of keystores in Qt GUI Wallet>Information (#4700)
+ * fix "signtransaction" RPC command (#6502)
+ * Dependencies: pyaes is no longer needed (#6563)
+ * The tar.gz source dist now bundles make_libsecp256k1.sh, to help
+   users getting libsecp256k1 (#6323).
+ * A few other minor bugfixes and usability improvements.
+
 # Release 4.0.2 - (July 8, 2020)
  - rm old corrupted non-bip70 invoices (#6345)
  - other minor fixes
diff --git a/electrum/version.py b/electrum/version.py
index 64908ba3e..ec65219fa 100644
--- a/electrum/version.py
+++ b/electrum/version.py
@@ -1,5 +1,5 @@
-ELECTRUM_VERSION = '4.0.2'     # version of the client package
-APK_VERSION = '4.0.2.0'        # read by buildozer.spec
+ELECTRUM_VERSION = '4.0.3'     # version of the client package
+APK_VERSION = '4.0.3.0'        # read by buildozer.spec
 
 PROTOCOL_VERSION = '1.4'     # protocol version requested