Alex Vandiver - The Zulip Blog

Zulip Server 5.7 security release

We released Zulip Server 5.7 today! This is a security release, containing a security fix and several cherry-picked changes since Zulip Server 5.6. Upgrading We recommend that all installations upgrade to this new release. See the upgrade instructions in the Zulip documentation. If you need help, best-effort support

Zulip Cloud

Data exported by Zulip Cloud organization administrators contained private files

Administrators of Zulip Cloud organizations can export public data from their organization via the organization settings menu. The exports include all the data that appears in public streams, and can be used to migrate from Zulip Cloud to self-hosting Zulip. Note that exporting private data is a separate process that

Release announcements

Zulip Server 5.4 security release

We released Zulip Server 5.4 today! This is a security release, containing a security fix and several cherry-picked changes since Zulip Server 5.3. Upgrading We recommend that all installations upgrade to this new release. See the upgrade instructions in the Zulip documentation. If you need help, best-effort support

Release announcements

Zulip Server 5.3 security release

We released Zulip Server 5.3 today! This is a security release, containing a minor security fix and several cherry-picked changes since Zulip Server 5.2. Upgrading We recommend that all installations upgrade to this new release. See the upgrade instructions in the Zulip documentation. If you need help, best-effort

Release announcements

Zulip Server 5.2 bug fix release

We released Zulip Server 5.2 today! This is a bugfix release, containing cherry-picked changes since Zulip Server 5.1. Upgrading We recommend that all installations upgrade to this new release. See the upgrade instructions in the Zulip documentation. If you need help, best-effort support is available on chat.zulip.

Release announcements

Zulip Server 5.1 bug fix release

We released Zulip Server 5.1 today! This is a bugfix release, containing a few cherry-picked changes since Zulip Server 5.0, primarily to address upgrading bugs. Upgrading We recommend that all installations upgrade to this new release. See the upgrade instructions in the Zulip documentation. If you need help,

Release announcements

Zulip Server 4.11 security release

We released Zulip Server 4.11 today! This is a security release, containing a minor security fix. Upgrading We recommend that all installations upgrade to this new release. See the upgrade instructions in the Zulip documentation. If you need help, best-effort support is available on chat.zulip.org. Reminder: upgrade

Security

Zulip Cloud security vulnerability with reusable invitation links

An internal investigation recently uncovered a vulnerability (identified as CVE-2022-21706) in Zulip’s invitation links. Specifically, a reusable invitation link could be used to join a different organization than the one it was created for. As a result, there was a potential for users to join any organization without an

Release announcements

Zulip Server 4.10 security release

We released Zulip Server 4.10 today! This is a security release, containing important security fixes, as well as important cherry-picked bug fixes, since Zulip Server 4.9. Upgrading We strongly recommend that all installations upgrade to this new release. See the upgrade instructions in the Zulip documentation. If you

Release announcements

Zulip Server 4.9 security release

We released Zulip Server 4.9 today! This is a security release, containing critical security fixes, as well as important cherry-picked bug fixes, since Zulip Server 4.8. UpgradingWe strongly recommend that all installations upgrade to this new release. See the upgrade instructions in the Zulip documentation. If you need

Security

CVE-2021-3866: XSS in stream names

This is an important security announcement for Zulip installations running the main (development) branch of the Zulip server. The main branch of Zulip Server, since a commit merged on December 4th, was vulnerable to a stored cross-site scripting vulnerability in stream names. A malicious user with permission to create or

Release announcements

Zulip Server 4.8 security release

We released Zulip Server 4.8 today! This is a security release, containing important security fixes, as well as important cherry-picked bug fixes, since Zulip Server 4.7. Deprecating support for Ubuntu 18.04 BionicWith this release, we are deprecating support for Ubuntu 18.04 Bionic. Specifically, Ubuntu 18.04

Release announcements

Zulip Server 4.7 security release

We released Zulip Server 4.7 today! This is a security release, containing minor security fixes since Zulip Server 4.6. What's newThis release fixes CVE-2021-41115, which prevents organization administrators from affecting the server with a regular expression denial-of-service attack through linkifier patterns. Parts of this vulnerability were discovered by

Release announcements

Zulip Server 4.4 security release

We released Zulip Server 4.4 today! This is a security release, containing important security fixes, as well as important cherry-picked bug fixes, since Zulip Server 4.3. What’s newThis release fixes the following issues: Added a tool to fix potential database corruption caused by host OS upgrades; see

Release announcements

Zulip Server 3.4 security release

Zulip Server 3.4 was released today! This is a security release, containing important security updates for the 3.x series of Zulip Server. This will likely be the last release in the 3.x stable release series, as we are getting close to publishing the first release candidate for

Release announcements

Zulip Server 3.3 bug fix release

We released Zulip Server 3.3 today! This is a bug fix release, containing a few cherry-picked changes since Zulip Server 3.2. What’s newThis releases fixes multiple important bugs in previous versions of Zulip. It contains fixes for the following issues: Guest users should not be allowed to

Release announcements

Zulip Server 3.2 bug fix release

We released Zulip Server 3.2 today! This is a bug fix release, containing a few cherry-picked changes since Zulip Server 3.1. What’s newThis releases fixes multiple important bugs in previous versions of Zulip. It contains fixes for the following issues: Switched from libmemcached to python-binary-memcached, a pure-Python