diff --git a/changelog/5.0.2_2024-04-17/bump-reva.md b/changelog/5.0.2_2024-04-17/bump-reva.md
new file mode 100644
index 000000000..f18e03f08
--- /dev/null
+++ b/changelog/5.0.2_2024-04-17/bump-reva.md
@@ -0,0 +1,8 @@
+Bugfix: Update reva to v2.19.5
+
+We updated reva to v2.19.5
+
+*   Bugfix [cs3org/reva#4626](https://github.com/cs3org/reva/pull/4626): Fix public share update
+*   Bugfix [cs3org/reva#4634](https://github.com/cs3org/reva/pull/4634): Fix access to files withing a public link targeting a space root
+
+https://github.com/owncloud/ocis/pull/8873
diff --git a/changelog/5.0.2_2024-04-17/fix-adding-wopi-doc-on-public-share.md b/changelog/5.0.2_2024-04-17/fix-adding-wopi-doc-on-public-share.md
new file mode 100644
index 000000000..5c901ab55
--- /dev/null
+++ b/changelog/5.0.2_2024-04-17/fix-adding-wopi-doc-on-public-share.md
@@ -0,0 +1,7 @@
+Bugfix: Fix creating new WOPI documents on public shares
+
+Creating a new Office document in a publicly shared folder is now possible.
+
+https://github.com/owncloud/ocis/pull/8828
+https://github.com/owncloud/ocis/issues/8691
+
diff --git a/deployments/continuous-deployment-config/ocis_keycloak/released.yml b/deployments/continuous-deployment-config/ocis_keycloak/released.yml
index 681878121..159518eb9 100644
--- a/deployments/continuous-deployment-config/ocis_keycloak/released.yml
+++ b/deployments/continuous-deployment-config/ocis_keycloak/released.yml
@@ -32,7 +32,7 @@
         env:
           INSECURE: "false"
           TRAEFIK_ACME_MAIL: mbarz@owncloud.com
-          OCIS_DOCKER_TAG: 5.0.1
+          OCIS_DOCKER_TAG: 5.0.2
           OCIS_DOMAIN: ocis.ocis-keycloak.released.owncloud.works
           KEYCLOAK_DOMAIN: keycloak.ocis-keycloak.released.owncloud.works
           COMPOSE_FILE: docker-compose.yml:monitoring_tracing/docker-compose-additions.yml
diff --git a/deployments/continuous-deployment-config/ocis_ldap/released.yml b/deployments/continuous-deployment-config/ocis_ldap/released.yml
index 1936bf758..fae0f76d4 100644
--- a/deployments/continuous-deployment-config/ocis_ldap/released.yml
+++ b/deployments/continuous-deployment-config/ocis_ldap/released.yml
@@ -32,7 +32,7 @@
         env:
           INSECURE: "false"
           TRAEFIK_ACME_MAIL: mbarz@owncloud.com
-          OCIS_DOCKER_TAG: 5.0.1
+          OCIS_DOCKER_TAG: 5.0.2
           OCIS_DOMAIN: ocis.ocis-ldap.released.owncloud.works
           LDAP_MANAGER_DOMAIN: ldap.ocis-ldap.released.owncloud.works
           COMPOSE_FILE: docker-compose.yml:monitoring_tracing/docker-compose-additions.yml
diff --git a/deployments/continuous-deployment-config/ocis_traefik/released.yml b/deployments/continuous-deployment-config/ocis_traefik/released.yml
index 1345b85f1..67d79a944 100644
--- a/deployments/continuous-deployment-config/ocis_traefik/released.yml
+++ b/deployments/continuous-deployment-config/ocis_traefik/released.yml
@@ -32,7 +32,7 @@
         env:
           INSECURE: "false"
           TRAEFIK_ACME_MAIL: mbarz@owncloud.com
-          OCIS_DOCKER_TAG: 5.0.1
+          OCIS_DOCKER_TAG: 5.0.2
           OCIS_DOMAIN: ocis.ocis-traefik.released.owncloud.works
           DEMO_USERS: "true"
           INBUCKET_DOMAIN: mail.ocis-traefik.released.owncloud.works
diff --git a/deployments/continuous-deployment-config/ocis_wopi/released.yml b/deployments/continuous-deployment-config/ocis_wopi/released.yml
index 4673fb487..ccb00d027 100644
--- a/deployments/continuous-deployment-config/ocis_wopi/released.yml
+++ b/deployments/continuous-deployment-config/ocis_wopi/released.yml
@@ -32,7 +32,7 @@
         env:
           INSECURE: "false"
           TRAEFIK_ACME_MAIL: mbarz@owncloud.com
-          OCIS_DOCKER_TAG: 5.0.1
+          OCIS_DOCKER_TAG: 5.0.2
           OCIS_DOMAIN: ocis.ocis-wopi.released.owncloud.works
           COMPANION_DOMAIN: companion.ocis-wopi.released.owncloud.works
           COMPANION_IMAGE: owncloud/uppy-companion:3.12.13-owncloud