diff --git a/CMakeLists.txt b/CMakeLists.txt
index 061fe0a8..faaade50 100644
--- a/CMakeLists.txt
+++ b/CMakeLists.txt
@@ -10,11 +10,11 @@ set(PACKAGE "libwebsockets")
 set(CPACK_PACKAGE_NAME "${PACKAGE}")
 set(CPACK_PACKAGE_VERSION_MAJOR "2")
 set(CPACK_PACKAGE_VERSION_MINOR "0")
-set(CPACK_PACKAGE_VERSION_PATCH "2")
+set(CPACK_PACKAGE_VERSION_PATCH "3")
 set(CPACK_PACKAGE_VERSION "${CPACK_PACKAGE_VERSION_MAJOR}.${CPACK_PACKAGE_VERSION_MINOR}.${CPACK_PACKAGE_VERSION_PATCH}")
 set(CPACK_PACKAGE_VENDOR "andy@warmcat.com")
 set(CPACK_PACKAGE_DESCRIPTION_SUMMARY "${PACKAGE} ${PACKAGE_VERSION}")
-set(SOVERSION "8")
+set(SOVERSION "8.1")
 set(CPACK_SOURCE_GENERATOR "TGZ")
 set(CPACK_SOURCE_PACKAGE_FILE_NAME "${CPACK_PACKAGE_NAME}-${CPACK_PACKAGE_VERSION}")
 set(VERSION "${CPACK_PACKAGE_VERSION}")
diff --git a/changelog b/changelog
index 3e54fa05..3d968c92 100644
--- a/changelog
+++ b/changelog
@@ -1,6 +1,29 @@
 Changelog
 ---------
 
+v2.0.3
+======
+
+NB New api lws_snprintf() -> SONAME bump to 8.1
+
+Fixes
+-----
+
+1) Remove duplicate close in one error path
+
+2) Build fix for ecdh and non-openssl
+
+3) Client confirms server cert
+
+4) SNI falls back to match wildcard DNS names (this is later checked against
+the cert for actual validity at SSL level)
+
+5) Fix one error path on vhost adopt_socket where we are left on timeout list
+
+6) lws_snprintf() - fix critical problem with snprintf not truncating buffer
+lengths (it truncated the buffer write) as (wrongly) expected
+
+
 v2.0.2
 ======
 
diff --git a/libwebsockets.spec b/libwebsockets.spec
index 78caf6dc..6feab26e 100644
--- a/libwebsockets.spec
+++ b/libwebsockets.spec
@@ -1,5 +1,5 @@
 Name: libwebsockets
-Version: 2.0.2
+Version: 2.0.3
 Release: 1%{?dist}
 Summary: Websocket Server and Client Library
 
@@ -55,7 +55,7 @@ rm -rf $RPM_BUILD_ROOT
 /usr/bin/libwebsockets-test-echo
 /usr/bin/libwebsockets-test-fraggle
 /usr/bin/libwebsockets-test-fuzxy
-/%{_libdir}/libwebsockets.so.8
+/%{_libdir}/libwebsockets.so.8.1
 /%{_libdir}/libwebsockets.so
 /%{_libdir}/cmake/libwebsockets/LibwebsocketsConfig.cmake
 /%{_libdir}/cmake/libwebsockets/LibwebsocketsConfigVersion.cmake
@@ -70,6 +70,9 @@ rm -rf $RPM_BUILD_ROOT
 /%{_libdir}/pkgconfig/libwebsockets.pc
 
 %changelog
+* Thu Sep 15 2016 Andy Green <andy@warmcat.com> 2.0.3-1
+- MAJOR Upstream 2.0.3 release
+
 * Mon Jun 06 2016 Andy Green <andy@warmcat.com> 2.0.2-1
 - MINOR Upstream 2.0.2 release