diff --git a/docs/overview/changelog.md b/docs/overview/changelog.md index 5dc6d2d181..a64aeee8e4 100644 --- a/docs/overview/changelog.md +++ b/docs/overview/changelog.md @@ -17,6 +17,17 @@ log][commit-log] for an up-to-date list of raw changes. ## Zulip 5.x series +### 5.5 -- 2022-07-21 + +- CVE-2022-31168: Fix authorization check for changing bot roles. Due + to an incorrect authorization check in Zulip Server 5.4 and all prior + releases, a member of an organization could craft an API call that + would grant organization administrator privileges to one of their bots. +- Added new options to the `restore-backup` tool to simplify restoring + backups on a system with a different configuration. +- Updated translations, including major updates to the Mongolian and + Serbian translations. + ### 5.4 -- 2022-07-11 - CVE-2022-31134: Exclude private file uploads from [exports of public diff --git a/version.py b/version.py index a364e21503..da68475a2b 100644 --- a/version.py +++ b/version.py @@ -14,7 +14,7 @@ ZULIP_VERSION = lines.pop(0).strip() ZULIP_MERGE_BASE = lines.pop(0).strip() LATEST_MAJOR_VERSION = "5.0" -LATEST_RELEASE_VERSION = "5.4" +LATEST_RELEASE_VERSION = "5.5" LATEST_RELEASE_ANNOUNCEMENT = "https://blog.zulip.com/2022/03/29/zulip-5-0-released/" # Versions of the desktop app below DESKTOP_MINIMUM_VERSION will be