Release Zulip Server 2.0.7.

docs/conf.py

@@ -52,7 +52,7 @@ author = 'The Zulip Team'
 # The short X.Y version.
 version = '2.0'
 # The full version, including alpha/beta/rc tags.
-release = '2.0.6'
+release = '2.0.7'
 
 # This allows us to insert a warning that appears only on an unreleased
 # version, e.g. to say that something is likely to have changed.

docs/overview/changelog.md

@@ -7,6 +7,11 @@ All notable changes to the Zulip server are documented in this file.
 This section lists notable unreleased changes; it is generally updated
 in bursts.
 
+### 2.0.7 -- 2019-11-21
+
+- CVE-2019-18933: Fix insecure account creation via social authentication.
+- Added backend enforcement of zxcvbn password strength checks.
+
 ### 2.0.6 -- 2019-09-23
 
 - Updated signing keys for the PGroonga repository for Debian Stretch.

version.py

@@ -1,6 +1,6 @@
-ZULIP_VERSION = "2.0.6"
+ZULIP_VERSION = "2.0.7"
 LATEST_MAJOR_VERSION = "2.0"
-LATEST_RELEASE_VERSION = "2.0.6"
+LATEST_RELEASE_VERSION = "2.0.7"
 LATEST_RELEASE_ANNOUNCEMENT = "https://blog.zulip.org/2019/03/01/zulip-2-0-released/"
 
 # Bump the minor PROVISION_VERSION to indicate that folks should provision