diff --git a/CHANGELOG.md b/CHANGELOG.md
index ebfb1b7b80..8f6fa3fb49 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,3 +1,26 @@
+## stable-5142-1
+
+Based on stable release 5142-1.
+
+* b0cb4a1 web: update TLS config to Mozilla security guidelines
+* 0601212 web: replace certbot with acme.sh
+* 43f678d build: refactor Makefile
+* b00f92a web: use Python 3 only for certbot
+* 880b9b0 core: update base image to Debian Buster
+* ba01190 web: prevent s6 from restarting cron if it shouldn't be run
+* 42a4346 etherpad: use official image and making skin full width
+* c36c4d0 web: always rebuild nginx configs on start
+* aea4411 Adds private server.
+* 6b69576 web: add ability to configure tokenAuthUrl
+* ff6d9bc Fix websocket
+* e5746ae misc: add ENABLE_PREJOIN_PAGE to .env
+* 465816b web,prosody: turn on XMPP WebSocket by default
+* d747bfb web,prosody: add XMPP WebSocket / Stream Management support
+* 130eb55 jvb: migrate to new config file
+* 5290499 doc: updated link for running behind NAT
+* 7cb470c misc: support/encourage usage of ShellCheck
+* 04a210f misc: working on latest
+
 ## stable-5142
 
 Based on stable release 5142.
diff --git a/docker-compose.yml b/docker-compose.yml
index 0df3426fb9..378b28e691 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -3,7 +3,7 @@ version: '3'
 services:
     # Frontend
     web:
-        image: jitsi/web:latest
+        image: jitsi/web:stable-5142-1
         restart: ${RESTART_POLICY}
         ports:
             - '${HTTP_PORT}:80'
@@ -96,7 +96,7 @@ services:
 
     # XMPP server
     prosody:
-        image: jitsi/prosody:latest
+        image: jitsi/prosody:stable-5142-1
         restart: ${RESTART_POLICY}
         expose:
             - '5222'
@@ -164,7 +164,7 @@ services:
 
     # Focus component
     jicofo:
-        image: jitsi/jicofo:latest
+        image: jitsi/jicofo:stable-5142-1
         restart: ${RESTART_POLICY}
         volumes:
             - ${CONFIG}/jicofo:/config:Z
@@ -193,7 +193,7 @@ services:
 
     # Video bridge
     jvb:
-        image: jitsi/jvb:latest
+        image: jitsi/jvb:stable-5142-1
         restart: ${RESTART_POLICY}
         ports:
             - '${JVB_PORT}:${JVB_PORT}/udp'
diff --git a/jibri.yml b/jibri.yml
index 67b5b9807f..c3f0ca99a3 100644
--- a/jibri.yml
+++ b/jibri.yml
@@ -2,7 +2,7 @@ version: '3'
 
 services:
     jibri:
-        image: jitsi/jibri:latest
+        image: jitsi/jibri:stable-5142-1
         restart: ${RESTART_POLICY}
         volumes:
             - ${CONFIG}/jibri:/config:Z
diff --git a/jigasi.yml b/jigasi.yml
index b50ab71297..2d452f9148 100644
--- a/jigasi.yml
+++ b/jigasi.yml
@@ -3,7 +3,7 @@ version: '3'
 services:
     # SIP gateway (audio)
     jigasi:
-        image: jitsi/jigasi:latest
+        image: jitsi/jigasi:stable-5142-1
         restart: ${RESTART_POLICY}
         ports:
             - '${JIGASI_PORT_MIN}-${JIGASI_PORT_MAX}:${JIGASI_PORT_MIN}-${JIGASI_PORT_MAX}/udp'