diff --git a/CHANGELOG-5.3.md b/CHANGELOG-5.3.md
index 25c4691a7fbd8..d3d595787c3cf 100644
--- a/CHANGELOG-5.3.md
+++ b/CHANGELOG-5.3.md
@@ -7,6 +7,43 @@ in 5.3 minor versions.
 To get the diff for a specific change, go to https://github.com/symfony/symfony/commit/XXX where XXX is the change hash
 To get the diff between two versions, go to https://github.com/symfony/symfony/compare/v5.3.0...v5.3.1
 
+* 5.3.3 (2021-06-30)
+
+ * bug #41910 [Security] Handle concurency in Csrf DoctrineTokenProvider (jderusse)
+ * bug #41881 Fix SessionTokenStorage reuse with Request (jderusse)
+ * bug #41893 [Filesystem] Workaround cannot dumpFile into "protected" folders on Windows (arnegroskurth)
+ * bug #41896 [Messenger] fix FlattenExceptionNormalizer (nicolas-grekas)
+ * bug #41242 [SecurityBundle] Change information label from red to yellow (94noni)
+ * bug #41665 [HttpKernel] Keep max lifetime also when part of the responses don't set it (mpdude)
+ * bug #41760 [ErrorHandler] fix handling buffered SilencedErrorContext (nicolas-grekas)
+ * bug #41807 [HttpClient] fix Psr18Client when allow_url_fopen=0 (nicolas-grekas)
+ * bug #41735 [Runtime] Fix project dir variable when vendor not in project root (Ash014)
+ * bug #40857 [DependencyInjection] Add support of PHP enumerations (alexandre-daubois)
+ * bug #41767 [Config] fix tracking default values that reference the parent class (nicolas-grekas)
+ * bug #41768 [DependencyInjection] Fix binding "iterable $foo" when using the PHP-DSL (nicolas-grekas)
+ * bug #41777 [DependencyInjection] accept service locator definitions with no class (nicolas-grekas)
+ * bug #41801 [Uid] Fix fromString() with low base58 values (fancyweb)
+ * bug #41793 [Cache] handle prefixed redis connections when clearing pools (nicolas-grekas)
+ * bug #41804 [Cache] fix eventual consistency when using RedisTagAwareAdapter with a cluster (nicolas-grekas)
+ * bug #41773 [Cache] Disable locking on Windows by default (nicolas-grekas)
+ * bug #41655 [Mailer] fix encoding of addresses using SmtpTransport (dmaicher)
+ * bug #41663 [HttpKernel] [HttpCache] Keep s-maxage=0 from ESI sub-responses (mpdude)
+ * bug #41739 Avoid broken action URL in text notification mail (mbrodala)
+ * bug #41737 [Security] Fix special char used to create cache key (jderusse)
+ * bug #41701 [VarDumper] Fix tests for PHP 8.1 (alexandre-daubois)
+ * bug #41795 [FrameworkBundle] Replace var_export with VarExporter to use array short syntax in secrets list files (alexandre-daubois)
+ * bug #41779 [DependencyInjection] throw proper exception when decorating a synthetic service (nicolas-grekas)
+ * bug #41787 [Security] Implement fluent interface on RememberMeBadge::disable() (derrabus)
+ * bug #41776 [ErrorHandler] [DebugClassLoader] Do not check Phake mocks classes (adoy)
+ * bug #41780 [PhpUnitBridge] fix handling the COMPOSER_BINARY env var when using simple-phpunit (Taluu)
+ * bug #41755 [PasswordHasher] UserPasswordHasher only calls getSalt when method exists (dbrumann)
+ * bug #41670 [HttpFoundation] allow savePath of NativeFileSessionHandler to be null (simon.chrzanowski)
+ * bug #41751 [Messenger] prevent reflection usages when classes do not exist (xabbuh)
+ * bug #41747 [Security] Fixed 'security.command.debug_firewall' not found (Nyholm)
+ * bug #41741 [Security] Fix invalid RememberMe value after update (jderusse)
+ * bug #41744 [Security] Fix invalid cookie when migrating to new Security (jderusse)
+ * bug #41740 [Security] make the getter usable if no user identifier is set (xabbuh)
+
 * 5.3.2 (2021-06-17)
 
  * security #cve-2021-32693 [SecurityHttp] Fix "Authentication granted with multiple firewalls" (wouterj)
diff --git a/src/Symfony/Component/HttpKernel/Kernel.php b/src/Symfony/Component/HttpKernel/Kernel.php
index 5aaee87e04978..d251c23ec2a2c 100644
--- a/src/Symfony/Component/HttpKernel/Kernel.php
+++ b/src/Symfony/Component/HttpKernel/Kernel.php
@@ -75,12 +75,12 @@ abstract class Kernel implements KernelInterface, RebootableInterface, Terminabl
 
     private static $freshCache = [];
 
-    public const VERSION = '5.3.3-DEV';
+    public const VERSION = '5.3.3';
     public const VERSION_ID = 50303;
     public const MAJOR_VERSION = 5;
     public const MINOR_VERSION = 3;
     public const RELEASE_VERSION = 3;
-    public const EXTRA_VERSION = 'DEV';
+    public const EXTRA_VERSION = '';
 
     public const END_OF_MAINTENANCE = '01/2022';
     public const END_OF_LIFE = '01/2022';