paulmataruso/zulip
1
0
Fork 0
mirror of https://github.com/zulip/zulip.git synced 2025-11-12 18:06:44 +00:00
Code Issues Packages Projects Releases Wiki Activity

Release Zulip Server 3.4

Browse Source
This commit is contained in:
Alex Vandiver
2021-04-14 11:47:18 -07:00
parent 5a0553e18b
commit 974b95b095
2 changed files with 23 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

21
docs/overview/changelog.md
View File

@@ -7,6 +7,27 @@ All notable changes to the Zulip server are documented in this file.
This section lists notable unreleased changes; it is generally updated This section lists notable unreleased changes; it is generally updated
in bursts. in bursts.
### 3.4 -- April 14, 2021
- CVE-2021-30487: Prevent administrators from moving topics to
disallowed streams.
- CVE-2021-30479: Prevent guest user access to `all_public_streams`
API.
- CVE-2021-30478: Prevent API super users from forging messages to
other organizations.
- CVE-2021-30477: Prevent outgoing webhook bots from sending arbitrary
messages to any stream.
- Fixed a potential HTML injection bug in outgoing emails.
- Fixed Postfix configuration error which would prevent outgoing email
to any email address containing `.`, `+`, or starting with `mm`, when
configured to use the local Postfix to deliver outgoing email.
- Fixed a backporting error which caused the `manage.py
change_user_role` tool to not work for `admin`, `member`, or `guest` roles.
- Add support for logout events sent from modern versions of the
desktop application.
- Upgraded minor python dependencies.
- Minor documentation fixes.
### 3.3 -- December 1, 2020 ### 3.3 -- December 1, 2020
- Guest users should not be allowed to post to streams marked “Only - Guest users should not be allowed to post to streams marked “Only

4
version.py
View File

@@ -1,6 +1,6 @@
import os import os
ZULIP_VERSION = "3.3+git" ZULIP_VERSION = "3.4"
# Add information on number of commits and commit hash to version, if available # Add information on number of commits and commit hash to version, if available
zulip_git_version_file = os.path.join(os.path.dirname(os.path.abspath(__file__)), 'zulip-git-version') zulip_git_version_file = os.path.join(os.path.dirname(os.path.abspath(__file__)), 'zulip-git-version')
if os.path.exists(zulip_git_version_file): if os.path.exists(zulip_git_version_file):
@@ -10,7 +10,7 @@ if os.path.exists(zulip_git_version_file):
ZULIP_VERSION = version ZULIP_VERSION = version
LATEST_MAJOR_VERSION = "3.0" LATEST_MAJOR_VERSION = "3.0"
LATEST_RELEASE_VERSION = "3.3" LATEST_RELEASE_VERSION = "3.4"
LATEST_RELEASE_ANNOUNCEMENT = "https://blog.zulip.org/2020/07/16/zulip-3-0-released/" LATEST_RELEASE_ANNOUNCEMENT = "https://blog.zulip.org/2020/07/16/zulip-3-0-released/"
LATEST_DESKTOP_VERSION = "5.3.0" LATEST_DESKTOP_VERSION = "5.3.0"