diff --git a/CHANGELOG.md b/CHANGELOG.md
index 7bfc82a023..d56679fbb5 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -6,6 +6,7 @@ then you win. –- Mahatma Gandhi
 
 Mon Jan 22, 2018 (0.17.2)
 ---------------------------------------------------------------------
+ - Fix CVE-2017-0889
  - Fix #687
 
 Mon Jan 22, 2018 (0.16.2)
diff --git a/Gemfile.lock b/Gemfile.lock
index d3b604b921..0df9ee9f7e 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -162,7 +162,7 @@ GEM
       tilt
     headless (2.3.1)
     htmlentities (4.3.4)
-    i18n (0.9.1)
+    i18n (0.9.3)
       concurrent-ruby (~> 1.0)
     i18n_data (0.8.0)
     io-like (0.3.0)
@@ -208,7 +208,7 @@ GEM
     paper_trail (6.0.2)
       activerecord (>= 4.0, < 5.2)
       request_store (~> 1.1)
-    paperclip (5.1.0)
+    paperclip (5.2.0)
       activemodel (>= 4.2.0)
       activesupport (>= 4.2.0)
       cocaine (~> 0.5.5)
@@ -474,4 +474,4 @@ DEPENDENCIES
   zeus
 
 BUNDLED WITH
-   1.16.0
+   1.16.1