diff --git a/CHANGELOG b/CHANGELOG
index 93c352b91..eccc4d24c 100644
--- a/CHANGELOG
+++ b/CHANGELOG
@@ -1,6 +1,8 @@
 CHANGELOG Roundcube Webmail
 ===========================
 
+RELEASE 0.8.6
+-------------
 - Fix vulnerability in handling _session argument of utils/save-prefs (#1489382)
 
 RELEASE 0.8.6
diff --git a/index.php b/index.php
index 754d5280b..667efdc76 100644
--- a/index.php
+++ b/index.php
@@ -2,7 +2,7 @@
 /*
  +-------------------------------------------------------------------------+
  | Roundcube Webmail IMAP Client                                           |
- | Version 0.8.6                                                           |
+ | Version 0.8.7                                                           |
  |                                                                         |
  | Copyright (C) 2005-2012, The Roundcube Dev Team                         |
  |                                                                         |
diff --git a/program/include/iniset.php b/program/include/iniset.php
index 873b02ecc..1c10e531a 100644
--- a/program/include/iniset.php
+++ b/program/include/iniset.php
@@ -42,7 +42,7 @@ foreach ($config as $optname => $optval) {
 }
 
 // application constants
-define('RCMAIL_VERSION', '0.8.6');
+define('RCMAIL_VERSION', '0.8.7');
 define('RCMAIL_CHARSET', 'UTF-8');
 define('JS_OBJECT_NAME', 'rcmail');
 define('RCMAIL_START', microtime(true));