Release Zulip Server 2.1.3.

This commit is contained in:
Tim Abbott
2020-04-01 13:30:21 -07:00
parent 76ce370181
commit d22cb7d01f
2 changed files with 11 additions and 5 deletions

View File

@@ -7,13 +7,18 @@ All notable changes to the Zulip server are documented in this file.
This section lists notable unreleased changes; it is generally updated This section lists notable unreleased changes; it is generally updated
in bursts. in bursts.
### 2.1.3 -- 2020-02-?? ### 2.1.3 -- 2020-04-01
- Added red warning at top of page for users of ancient desktop app - CVE-2020-9444: Prevent reverse tabnapping attacks.
version 2.3.82 with broken auto-update. - CVE-2020-9445: Remove unused and insecure modal_link feature.
- CVE-2020-10935: Fix XSS vulnerability in local link rewriting.
- Blocked access from Zulip Desktop versions below 5.0.0. This
behavior can be adjusted by editing `DESKTOP_*_VERSION`
in `/home/zulip/deployments/current/version.py`.
- Restructured server initialization to simplify initialization of - Restructured server initialization to simplify initialization of
Docker containers (eliminating common classes of user error). Docker containers (eliminating common classes of user error).
- Removed buggy feedback bot (`ENABLE_FEEDBACK`). - Removed buggy feedback bot (`ENABLE_FEEDBACK`).
- Migrated GitHub authentication to use the current encoding.
- Fixed support for restoring a backup on a different minor release - Fixed support for restoring a backup on a different minor release
(in the common case they have the same database schema). (in the common case they have the same database schema).
- Fixed restoring backups with memcached authentication enabled. - Fixed restoring backups with memcached authentication enabled.
@@ -22,6 +27,7 @@ in bursts.
- Fixed buggy loading spinner in "emoji format" widget. - Fixed buggy loading spinner in "emoji format" widget.
- Fixed sorting and filtering users in organization settings. - Fixed sorting and filtering users in organization settings.
- Fixed handling of links to deleted streams. - Fixed handling of links to deleted streams.
- Fixed check-rabbitmq-consumers monitoring.
- Fixed copy-to-clipboard button for outgoing webhook bots. - Fixed copy-to-clipboard button for outgoing webhook bots.
- Fixed logging spam from soft_deactivation cron job. - Fixed logging spam from soft_deactivation cron job.
- Fixed email integration handling of emails with nested MIME structure. - Fixed email integration handling of emails with nested MIME structure.

View File

@@ -1,6 +1,6 @@
import os import os
ZULIP_VERSION = "2.1.2" ZULIP_VERSION = "2.1.3"
# Add information on number of commits and commit hash to version, if available # Add information on number of commits and commit hash to version, if available
zulip_git_version_file = os.path.join(os.path.dirname(os.path.abspath(__file__)), 'zulip-git-version') zulip_git_version_file = os.path.join(os.path.dirname(os.path.abspath(__file__)), 'zulip-git-version')
if os.path.exists(zulip_git_version_file): if os.path.exists(zulip_git_version_file):
@@ -10,7 +10,7 @@ if os.path.exists(zulip_git_version_file):
ZULIP_VERSION = version ZULIP_VERSION = version
LATEST_MAJOR_VERSION = "2.1" LATEST_MAJOR_VERSION = "2.1"
LATEST_RELEASE_VERSION = "2.1.2" LATEST_RELEASE_VERSION = "2.1.3"
LATEST_RELEASE_ANNOUNCEMENT = "https://blog.zulip.org/2019/12/13/zulip-2-1-released/" LATEST_RELEASE_ANNOUNCEMENT = "https://blog.zulip.org/2019/12/13/zulip-2-1-released/"
# Versions of the desktop app below DESKTOP_MINIMUM_VERSION will be # Versions of the desktop app below DESKTOP_MINIMUM_VERSION will be