Bump version + add CVE ID

CHANGELOG

@@ -1,11 +1,13 @@
 CHANGELOG Roundcube Webmail
 ===========================
 
+RELEASE 1.2.7
+-------------
 - Fix rewind(): stream does not support seeking (#5950)
 - Fix bug where HTML messages could have been rendered empty on some systems (#5957)
 - Fix (again) bug where image data URIs in css style were treated as evil/remote in mail preview (#5580)
 - Managesieve: Fix parsing dot-staffed lines in multiline text (#5838, #5959)
-- Fix file disclosure vulnerability caused by insuficient input validation in relation to attachment plugins (#6026)
+- Fix file disclosure vulnerability caused by insufficient input validation [CVE-2017-16651] (#6026)
 
 RELEASE 1.2.6
 -------------

index.php

@@ -2,7 +2,7 @@
 /**
  +-------------------------------------------------------------------------+
  | Roundcube Webmail IMAP Client                                           |
- | Version 1.2.6                                                           |
+ | Version 1.2.7                                                           |
  |                                                                         |
  | Copyright (C) 2005-2017, The Roundcube Dev Team                         |
  |                                                                         |

installer/index.php

@@ -3,7 +3,7 @@
 /**
  +-------------------------------------------------------------------------+
  | Roundcube Webmail setup tool                                            |
- | Version 1.2.6                                                           |
+ | Version 1.2.7                                                           |
  |                                                                         |
  | Copyright (C) 2009-2017, The Roundcube Dev Team                         |
  |                                                                         |

program/include/iniset.php

@@ -21,7 +21,7 @@
 */
 
 // application constants
-define('RCMAIL_VERSION', '1.2.6');
+define('RCMAIL_VERSION', '1.2.7');
 define('RCMAIL_START', microtime(true));
 
 if (!defined('INSTALL_PATH')) {

program/lib/Roundcube/bootstrap.php

@@ -55,7 +55,7 @@ foreach ($config as $optname => $optval) {
 }
 
 // framework constants
-define('RCUBE_VERSION', '1.2.6');
+define('RCUBE_VERSION', '1.2.7');
 define('RCUBE_CHARSET', 'UTF-8');
 
 if (!defined('RCUBE_LIB_DIR')) {