From 5d3e4d3e5698deb4884ba405d62838c348196893 Mon Sep 17 00:00:00 2001 From: Tim Abbott Date: Wed, 24 Aug 2022 13:10:05 -0700 Subject: [PATCH] version: Update version and changelog after 5.6 release. --- docs/overview/changelog.md | 11 +++++++++++ version.py | 2 +- 2 files changed, 12 insertions(+), 1 deletion(-) diff --git a/docs/overview/changelog.md b/docs/overview/changelog.md index 47a4b25962..5d1fd5ed42 100644 --- a/docs/overview/changelog.md +++ b/docs/overview/changelog.md @@ -100,6 +100,17 @@ log][commit-log] for an up-to-date list of raw changes. ## Zulip 5.x series +### 5.6 -- 2022-08-24 + +- CVE-2022-36048: Change the Markdown renderer to only rewrite known + local links as relative links, rather than rewriting all local + links. This fix also protects against a vulnerability in the Zulip + mobile app (CVE-2022-35962). +- Added hardening against timing attacks to an internal authentication check. +- Improved documentation for hosting multiple organizations on a server. +- Updated dependencies. +- Updated translations. + ### 5.5 -- 2022-07-21 - CVE-2022-31168: Fix authorization check for changing bot roles. Due diff --git a/version.py b/version.py index e15700f6f5..f6cbbe3c86 100644 --- a/version.py +++ b/version.py @@ -14,7 +14,7 @@ ZULIP_VERSION = lines.pop(0).strip() ZULIP_MERGE_BASE = lines.pop(0).strip() LATEST_MAJOR_VERSION = "5.0" -LATEST_RELEASE_VERSION = "5.5" +LATEST_RELEASE_VERSION = "5.6" LATEST_RELEASE_ANNOUNCEMENT = "https://blog.zulip.com/2022/03/29/zulip-5-0-released/" # Versions of the desktop app below DESKTOP_MINIMUM_VERSION will be