diff --git a/CHANGELOG.md b/CHANGELOG.md
index 51ec5674f..a973a2516 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -24,15 +24,24 @@ Code v99.99.999
 
 Code v1.79.2
 
+## [4.14.1](https://github.com/coder/code-server/releases/tag/v4.14.1) - 2023-06-26
+
+Code v1.79.2
+
+### Security
+
+- Remove extra write permissions on the Node binary bundled with the linux-amd64
+  tarball. If you extract the tar without a umask this could mean the Node
+  binary would be unexpectedly writable.
+
 ### Fixed
 
-- Fix being unable to launch multiple instances of code-server for different
-  users.
+- Inability to launch multiple instances of code-server for different users.
 
 ### Added
 
 - `--session-socket` CLI flag to configure the location of the session socket.
-  By default it will be placed in `--user-data-dir`.
+  By default it will be placed in `<user data dir>/code-server-ipc.sock`.
 
 ## [4.14.0](https://github.com/coder/code-server/releases/tag/v4.14.0) - 2023-06-16
 
diff --git a/ci/helm-chart/Chart.yaml b/ci/helm-chart/Chart.yaml
index cc0826ef7..76290f6f5 100644
--- a/ci/helm-chart/Chart.yaml
+++ b/ci/helm-chart/Chart.yaml
@@ -15,9 +15,9 @@ type: application
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
-version: 3.10.0
+version: 3.10.1
 
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application. Versions are not expected to
 # follow Semantic Versioning. They should reflect the version the application is using.
-appVersion: 4.14.0
+appVersion: 4.14.1
diff --git a/ci/helm-chart/values.yaml b/ci/helm-chart/values.yaml
index 5aa6a7828..83d110890 100644
--- a/ci/helm-chart/values.yaml
+++ b/ci/helm-chart/values.yaml
@@ -6,7 +6,7 @@ replicaCount: 1
 
 image:
   repository: codercom/code-server
-  tag: '4.14.0'
+  tag: '4.14.1'
   pullPolicy: Always
 
 # Specifies one or more secrets to be used when pulling images from a