diff --git a/changelog.md b/changelog.md
index aef7366da1..9b4eb18eb5 100644
--- a/changelog.md
+++ b/changelog.md
@@ -1,5 +1,18 @@
 # Changelog
 
+## 2.9.0~rc2
+
+### Web applications
+* Dependency updates:
+  * (Rust) sequoia-openpgp from 1.17.0 to 1.20.0 (#7178)
+
+### Operations
+* Added opt-in Tor PoW defense for the Source Interface (#7175)
+
+### Development
+* Ignored safety alert 70895 (#7179)
+* Added support for development virtualenv in Debian 12 (#7154)
+
 ## 2.9.0~rc1
 
 ### Web applications
diff --git a/install_files/ansible-base/group_vars/all/securedrop b/install_files/ansible-base/group_vars/all/securedrop
index 3987ff1994..f8372ec421 100644
--- a/install_files/ansible-base/group_vars/all/securedrop
+++ b/install_files/ansible-base/group_vars/all/securedrop
@@ -2,7 +2,7 @@
 # Variables that apply to both the app and monitor server go in this file
 # If the monitor or app server need different values define the variable in
 # hosts_vars/app.yml or host_vars/mon.yml
-securedrop_version: "2.9.0~rc1"
+securedrop_version: "2.9.0~rc2"
 securedrop_app_code_sdist_name: "securedrop-app-code-{{ securedrop_version | replace('~', '-') }}.tar.gz"
 
 grsecurity: true
diff --git a/securedrop/debian/changelog b/securedrop/debian/changelog
index 9e8041d830..18e9b9b32c 100644
--- a/securedrop/debian/changelog
+++ b/securedrop/debian/changelog
@@ -1,3 +1,9 @@
+securedrop (2.9.0~rc2+focal) focal; urgency=medium
+
+  * see changelog.md
+
+ -- SecureDrop Team <securedrop@freedom.press>  Thu, 13 Jun 2024 17:42:18 -0400
+
 securedrop (2.9.0~rc1+focal) focal; urgency=medium
 
   * see changelog.md
diff --git a/securedrop/setup.py b/securedrop/setup.py
index 20e5abc948..0f50e098ac 100644
--- a/securedrop/setup.py
+++ b/securedrop/setup.py
@@ -4,7 +4,7 @@
 
 setuptools.setup(
     name="securedrop-app-code",
-    version="2.9.0~rc1",
+    version="2.9.0~rc2",
     author="Freedom of the Press Foundation",
     author_email="securedrop@freedom.press",
     description="SecureDrop Server",
diff --git a/securedrop/version.py b/securedrop/version.py
index 3c6003ca64..236b7dc7f2 100644
--- a/securedrop/version.py
+++ b/securedrop/version.py
@@ -1 +1 @@
-__version__ = "2.9.0~rc1"
+__version__ = "2.9.0~rc2"