diff --git a/CHANGELOG b/CHANGELOG
index 6145a1d6c..2fda0357e 100644
--- a/CHANGELOG
+++ b/CHANGELOG
@@ -1,9 +1,11 @@
 CHANGELOG Roundcube Webmail
 ===========================
 
+RELEASE 1.3.3
+-------------
 - Fix decoding of mailto: links with + character in HTML messages (#6020)
 - Fix false reporting of failed upgrade in installto.sh (#6019)
-- Fix file disclosure vulnerability caused by insuficient input validation in relation to attachment plugins (#6026)
+- Fix file disclosure vulnerability caused by insufficient input validation [CVE-2017-16651] (#6026)
 - Fix mangled non-ASCII characters in links in HTML messages (#6028)
 
 RELEASE 1.3.2
diff --git a/index.php b/index.php
index 093cee8f7..ef02782ca 100644
--- a/index.php
+++ b/index.php
@@ -2,7 +2,7 @@
 /**
  +-------------------------------------------------------------------------+
  | Roundcube Webmail IMAP Client                                           |
- | Version 1.3.2                                                           |
+ | Version 1.3.3                                                           |
  |                                                                         |
  | Copyright (C) 2005-2017, The Roundcube Dev Team                         |
  |                                                                         |
diff --git a/installer/index.php b/installer/index.php
index dd9bc9a44..839073c57 100644
--- a/installer/index.php
+++ b/installer/index.php
@@ -3,7 +3,7 @@
 /**
  +-------------------------------------------------------------------------+
  | Roundcube Webmail setup tool                                            |
- | Version 1.3.2                                                           |
+ | Version 1.3.3                                                           |
  |                                                                         |
  | Copyright (C) 2009-2015, The Roundcube Dev Team                         |
  |                                                                         |
diff --git a/program/include/iniset.php b/program/include/iniset.php
index d0c28a4fe..af3531111 100644
--- a/program/include/iniset.php
+++ b/program/include/iniset.php
@@ -21,7 +21,7 @@
 */
 
 // application constants
-define('RCMAIL_VERSION', '1.3.2 ');
+define('RCMAIL_VERSION', '1.3.3');
 define('RCMAIL_START', microtime(true));
 
 if (!defined('INSTALL_PATH')) {
diff --git a/program/lib/Roundcube/bootstrap.php b/program/lib/Roundcube/bootstrap.php
index 23c0f8ae7..25d17d6a0 100644
--- a/program/lib/Roundcube/bootstrap.php
+++ b/program/lib/Roundcube/bootstrap.php
@@ -53,7 +53,7 @@ foreach ($config as $optname => $optval) {
 }
 
 // framework constants
-define('RCUBE_VERSION', '1.3.2 ');
+define('RCUBE_VERSION', '1.3.3');
 define('RCUBE_CHARSET', 'UTF-8');
 
 if (!defined('RCUBE_LIB_DIR')) {
diff --git a/public_html/index.php b/public_html/index.php
index dae8bda15..1fdff7f9e 100644
--- a/public_html/index.php
+++ b/public_html/index.php
@@ -3,7 +3,7 @@
 /*
  +-----------------------------------------------------------------------+
  | Roundcube Webmail IMAP Client                                         |
- | Version 1.3.2                                                         |
+ | Version 1.3.3                                                         |
  |                                                                       |
  | Copyright (C) 2005-2017, The Roundcube Dev Team                       |
  |                                                                       |