Skip to content

Commit

Permalink
Release Zulip Server 7.5.
Browse files Browse the repository at this point in the history
  • Loading branch information
alexmv committed Nov 16, 2023
1 parent ee6ab3d commit 09ccdc3
Show file tree
Hide file tree
Showing 2 changed files with 30 additions and 2 deletions.
28 changes: 28 additions & 0 deletions docs/overview/changelog.md
Original file line number Diff line number Diff line change
Expand Up @@ -7,6 +7,34 @@ up-to-date list of all changes.

## Zulip Server 7.x series

### Zulip Server 7.5

_Released 2023-11-16_

- CVE-2023-47642: Invalid metadata access for formerly subscribed streams.
It was discovered by the Zulip development team that active users who had
previously been subscribed to a stream incorrectly continued being able to use
the Zulip API to access metadata for that stream. As a result, users who had
been removed from a stream, but still had an account in the organization,
could still view metadata for that stream (including the stream name,
description, settings, and an email address used to send emails into the
stream via the incoming email integration). This potentially allowed users to
see changes to a stream’s metadata after they had lost access to the stream.
This bug was present in all Zulip releases prior to Zulip Server 7.5.
- Fixed a bug where [backups](../production/export-and-import.md#backups) might
be written using `postgresql-client-16`, which could not be straightforwardly
restored into a Zulip instance, as the format is not backwards-compatible, and
Zulip does not yet support PostgreSQL 16.
- Renamed the `reactivate_stream` management command to `unarchive_stream`, to
match terminology in the app, and [documented
it](https://zulip.com/help/archive-a-stream#unarchiving-archived-streams).
- Fixed a regression, introduced in 6.0, where users created via the API or LDAP
would have English set as their language, ignoring the configured realm
default.
- Improved [documentation on `AUTH_LDAP_ADVANCED_REALM_ACCESS_CONTROL`](../production/authentication-methods.md#restricting-ldap-user-access-to-specific-organizations).
- Improved error messages for subdomains being reserved versus being in use.
- Upgraded Python dependencies.

### Zulip Server 7.4

_Released 2023-09-15_
Expand Down
4 changes: 2 additions & 2 deletions version.py
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
import os

ZULIP_VERSION = "7.4+git"
ZULIP_VERSION = "7.5"

# Add information on number of commits and commit hash to version, if available
zulip_git_version_file = os.path.join(
Expand All @@ -14,7 +14,7 @@
ZULIP_MERGE_BASE = lines.pop(0).strip()

LATEST_MAJOR_VERSION = "7.0"
LATEST_RELEASE_VERSION = "7.4"
LATEST_RELEASE_VERSION = "7.5"
LATEST_RELEASE_ANNOUNCEMENT = "https://blog.zulip.com/2023/05/31/zulip-7-0-released/"

# Versions of the desktop app below DESKTOP_MINIMUM_VERSION will be
Expand Down

0 comments on commit 09ccdc3

Please sign in to comment.