We released Zulip Server 12.2 today! This release fixes five security issues and
a couple of bugs.
We have requested CVE IDs for these issues, but they have not yet been assigned.
Each issue is instead referenced below by its GitHub security advisory.
Upgrading
We recommend that all installations upgrade …
We released Zulip Server 12.1 today! This is a bug fix release, containing
cherry-picked changes since Zulip Server 12.0.
Upgrading
We recommend that all installations upgrade to this new release. See the
upgrade instructions
in the Zulip documentation. Zulip Cloud has already been upgraded with the
…
Today marks a major transition for the Zulip open-source project and for Kandra
Labs, the company behind it: I’m stepping back from full-time Zulip leadership
to join Anthropic, alongside three senior team members, and we’re donating the
company to a newly created, independent, nonprofit Zulip Foundation. …
We’re excited to announce the release of Zulip Server 12.0, containing hundreds
of new features and bug fixes: end-to-end encryption for mobile push
notifications, a major upgrade for Docker, configurable image previews, and much
more! Almost 5,500 new commits have been merged across the project since …
Cross-posted from
Atolio’s announcement.
Atolio, the only fully self-hosted, AI-powered
enterprise search platform designed for security-conscious organizations, is
excited to announce it now offers a native connector for
Zulip, the team chat platform that gives security-first
organizations complete …
We released Zulip Server 11.6 today! This release fixes two security issues
(CVE-2026-26058 and CVE-2026-25742), and several bugs.
Upgrading
We recommend that all installations upgrade to this new release. See the
upgrade instructions
in the Zulip documentation. Zulip Cloud has already been upgraded …
We released Zulip Server 11.5 today! This release makes several improvements to
the installation experience for the Docker image, as well as fixing a security
issue (CVE-2026-24050), and several bugs.
Upgrading
We recommend that all installations upgrade to this new release. See the
upgrade instructions
…
This summer,
12 contributors
completed the Google Summer of Code
(GSoC) program with the
Zulip development community. This
was the 10th consecutive year that Zulip participated in GSoC; over 130
contributors have now completed one of our formal internship programs, primarily
through Google Summer of …
Zulip organized team chat has now been
an open-source project
for 10 years! 🎉 🐙
It’s incredible how wonderful a group of people this project has brought
together — thoughtful, committed to excellence, and excited to teach and to
learn. So, THANK YOU to everyone who has contributed to Zulip over the …
We released Zulip Server 11.4 today! This is a bug fix release, containing one
bugfix to Zulip Server 11.3.
Upgrading
We recommend that all installations upgrade to this new release. See the
upgrade instructions
in the Zulip documentation. Zulip Cloud has already been upgraded with the
improvements …
We released Zulip Server 11.3 today! This is a bug fix release, containing
cherry-picked changes since Zulip Server 11.2.
Upgrading
We recommend that all installations upgrade to this new release. See the
upgrade instructions
in the Zulip documentation. Zulip Cloud has already been upgraded with the
…
We released Zulip Server 11.2 today! This is a bug fix release, containing
cherry-picked changes since Zulip Server 11.1.
Upgrading
We recommend that all installations upgrade to this new release. See the
upgrade instructions
in the Zulip documentation. Zulip Cloud has already been upgraded with the
…
We released Zulip Server 11.1 today! This is a bug fix release, containing
cherry-picked changes since Zulip Server 11.0.
Upgrading
We recommend that all installations upgrade to this new release. See the
upgrade instructions
in the Zulip documentation. Zulip Cloud has already been upgraded with the
…
Update (September 19): Shortly after the publication of this post, we
finally received working Microsoft Teams export links!
Under the
terms of the
European Union’s antitrust settlement announced last week, Microsoft has the
obligation to allow customers to “extract their Teams messaging data for use …
We’re excited to announce the release of Zulip Server 11.0, containing hundreds
of new features and bug fixes: message reminders, support for channels without
topics, channel folders, and so much more! Over 3,300 new commits have been
merged across the project since the 10.0 release in March.
Zulip
…
There’s a new camera app that you’ll just love! Here’s the FAQ for SnatchCam:
Can I view my pictures any time? You can view them for 90 days for free!
After that, you can sign up for a paid plan to keep access. You’ve got a year
until this app starts deleting older pictures.
Can I download my pictures? …
We released Zulip Server 10.4 today! This is a security release, fixing an
important security issue (CVE-2025-52559), as well as several bugs.
Upgrading
We recommend that all installations upgrade to this new release. See the
upgrade instructions
in the Zulip documentation. Zulip Cloud has already been …
Zulip’s next-generation app for Android and iOS is now our official mobile app!
The new app, powered by Flutter, offers a sleek new
design and a faster, smoother experience than the old app built on React Native.
Over 2000 users have installed earlier versions of the new app since its public
beta release
…
We released Zulip Server 10.3 today! This is a security release, fixing a
security issue (CVE-2025-47930), as well as several bugs, most importantly an
issue with LDAP synchronization of user roles.
Upgrading
We recommend that all installations upgrade to this new release. See the
upgrade instructions
…
We released Zulip Server 10.2 today! This is a security release, fixing a
critical security issue (CVE-2025-31478), as well as several bugs, most
importantly a collection of issues that prevented servers using some
S3-compatible block storage services from successfully uploading files on Zulip
Server …
We released Zulip Server 10.1 today! This is a security release, containing
important security fixes and cherry-picked changes since Zulip Server 10.0.
All three security issues are low severity for installations where all Zulip
organizations have the same set of trusted administrators.
Upgrading
We …
We’re excited to announce the release of Zulip Server 10.0, containing hundreds
of new features and bug fixes!
Zulip
is an open-source team chat application designed for seamless remote and hybrid
work. With conversations
organized by topic, Zulip is
ideal for both live and asynchronous
communication. …
How we seamlessly transitioned thousands of organizations to a group-based permissions system in a performance-sensitive application.
Zulip organized team chat has a new, incredibly flexible system for permissions
management! With it, you can:
Configure the permissions you want, granting them to any combination of
roles (e.g., Moderators), groups, and
individual users. For example:
Express your organization’s structure with
groups, …
A trick for staying positive when responding to questions that should not have been asked in the first place.
As we head into the new year, we want to share some fun facts and highlights
from 2024.
Emoji 😸
Zulip users are a positive bunch! About 3% of messages earned an emoji reaction,
with the top 10 reactions of 2024 being (in order):
Why an octopus 🐙? Zulip users like to use the octopus emoji, with its …
We released Zulip Server 9.4 today! This is a security release, containing
important security fixes and cherry-picked changes since Zulip Server 9.3.
Upgrading
We recommend that all installations upgrade to this new release. See the
upgrade instructions
in the Zulip documentation.
Commercial support …
I’m very happy to announce the general beta release of
Zulip’s next-generation mobile app for Android and iOS!
For over a year, we’ve been rebuilding mobile Zulip from scratch atop a new
technical foundation powered by Flutter. The new app
offers a sleek new design and a faster, smoother experience …
We released Zulip Server 9.3 today! This is a bug fix release, containing
cherry-picked changes since Zulip Server 9.2.
Upgrading
We recommend that all installations upgrade to this new release. See the
upgrade instructions
in the Zulip documentation.
Commercial support for server upgrades is available …
To make good use of your time, we focus on the handful of SaaS team chat apps you may want to seriously consider for your business.
This summer,
17 contributors
completed the Google Summer of Code
(GSoC) program with the
Zulip development community. This
was the 9th consecutive year that Zulip participated in GSoC; over 120
contributors have now completed one of our formal internship programs, primarily
through Google Summer of …
We released Zulip Server 9.2 today! This is a bug fix release, containing
cherry-picked changes since Zulip Server 9.1.
Upgrading
We recommend that all installations upgrade to this new release. See the
upgrade instructions
in the Zulip documentation.
Commercial support for server upgrades is available …
We released Zulip Server 9.1 today! This is a bug fix release, containing
cherry-picked changes since Zulip Server 9.0.
Upgrading
We recommend that all installations upgrade to this new release. See the
upgrade instructions
in the Zulip documentation.
Commercial support for server upgrades is available …
We released Zulip Server 8.5 today! This is a bug fix release, containing
cherry-picked changes since Zulip Server 8.4.
We expect this to be the final Zulip 8.x release, since Zulip 9.0 was
released last week.
Upgrading
This release is recommended for all Zulip installations that are not yet ready
to …
We’re excited to announce the release of Zulip Server 9.0, containing hundreds
of new features and bug fixes!
Zulip
is an open-source team chat application designed for seamless remote and hybrid
work. With conversations
organized by topic, Zulip is
ideal for both live and asynchronous
communication. …
Last week, Slack’s users realized that under the company’s terms of service,
their private data could be used to train artificial-intelligence models.
— Slack’s privacy principles,
May 17, 2024
This came as a shock: chat messages convey sensitive company data, and LLMs
(large language models, the category …
We released Zulip Server 8.4 today! This is a bug fix release, containing
cherry-picked changes since Zulip Server 8.3.
Upgrading
We recommend that all installations upgrade to this new release. See the
upgrade instructions
in the Zulip documentation. If you need help, best-effort support is available
…
Today is my three-year anniversary as the product leader for
Zulip, the organized team chat product. When I left my job
as a data science manager at Lyft, the career change felt like an experiment.
Now, I’ve been reflecting on why it’s hard to imagine working on anything else.
I’ve never had much patience …
We released Zulip Server 8.3 today! This is a security release, containing
important security fixes and cherry-picked changes since Zulip Server 8.2.
Upgrading
We recommend that all installations upgrade to this new release. See the
upgrade instructions
in the Zulip documentation. If you need help, …
We released Zulip Server 8.2 today! This is a bug fix release, containing
cherry-picked changes since Zulip Server 8.1.
Upgrading
We recommend that all installations upgrade to this new release. See the
upgrade instructions
in the Zulip documentation. If you need help, best-effort support is available
…
We released Zulip Server 8.1 today! This is a security release, containing
important security fixes and cherry-picked changes since Zulip Server 8.0.
Upgrading
We recommend that all installations upgrade to this new release. See the
upgrade instructions
in the Zulip documentation. If you need help, …
This summer,
13 contributors
completed the Google Summer of Code
(GSoC) program with the
Zulip development community. This
was the 8th consecutive year that Zulip participated in GSoC; over 100
contributors have now completed one of our formal internship programs, primarily
through Google Summer of …
On Friday last week, we announced
Zulip 8.0 and
some big pricing changes
for Zulip’s self-hosted customers.
In response to feedback from our user community, today we are adding
a new Basic plan for self-hosted
Zulip installations. The Basic plan is priced at $3.50/user/month, and
includes unlimited …
Update: We have published a
new blog post describing
an additional Zulip plan for self-hosting without commercial support.
Zulip is a 100% open-source team chat application designed
for efficient communication. Zulip is available as a
cloud service or a
self-hosted solution. Organizations that
self-host …
We’re excited to announce the release of Zulip Server 8.0, containing hundreds
of new features and bug fixes!
Zulip
is an open-source team chat application designed to help people collaborate to
solve any challenge. With conversations
organized by topic, Zulip is
ideal for both live and asynchronous
…
We released Zulip Server 7.5 today! This is a security release, containing
important security fixes and cherry-picked changes since Zulip Server 7.4.
Upgrading
We recommend that all installations upgrade to this new release. See the
upgrade instructions
in the Zulip documentation. If you need help, …
We released Zulip Server 7.4 today! This is a security release, containing
important security fixes and cherry-picked changes since Zulip Server 7.3.
Upgrading
We recommend that all installations upgrade to this new release. See the
upgrade instructions
in the Zulip documentation. If you need help, …
We have discovered and fixed a bug in Zulip that, in a rare situation, caused
uploaded attachments to be mistakenly deleted after 30 days. Specifically, if
someone chose to delete a message, Zulip deleted all the files that were
attached to that message. This behavior was incorrect for files that were …
We released Zulip Server 7.3 today! This is a security release, containing
important security fixes and cherry-picked changes since Zulip Server 7.2.
Upgrading
We recommend that all installations upgrade to this new release. See the
upgrade instructions
in the Zulip documentation. If you need help, …
We released Zulip Server 7.2 today! This is a bug fix release, containing
cherry-picked changes since Zulip Server 7.1.
Upgrading
We recommend that all installations upgrade to this new release. See the
upgrade instructions
in the Zulip documentation. If you need help, best-effort support is available
…
We released Zulip Server 7.1 today! This is a bug fix release, containing
cherry-picked changes since Zulip Server 7.0.
Upgrading
We recommend that all installations upgrade to this new release. See the
upgrade instructions
in the Zulip documentation. If you need help, best-effort support is available
…
We’re excited to announce the release of Zulip Server 7.0, containing hundreds
of new features and bug fixes!
Zulip is an open-source team chat application designed to
help people collaborate to solve any challenge. With conversations
organized by topic, Zulip is
ideal for both live and asynchronous
…
We released Zulip Server 6.2 today! This is a security release, containing two
security fixes and several cherry-picked changes since Zulip Server 6.1.
Upgrading
We recommend that all installations upgrade to this new release. See the
upgrade instructions
in the Zulip documentation. If you need help, …
Last
week, the open-core team chat platform Mattermost
announced that
“Mattermost Cloud Free will no longer be offered after July 26, 2023.” This
likely came as an unpleasant surprise to users on that plan, as
less than a month before,
Mattermost’s pricing page featured the promise that the Cloud Free …
We released Zulip Server 6.1 today! This is a bugfix release, containing
cherry-picked changes since Zulip Server 6.0.
Upgrading
We recommend that all installations upgrade to this new release. See the
upgrade instructions
in the Zulip documentation. If you need help, best-effort support is available
…
As we head into the new year, we want to share some fun facts and highlights
from 2022.
Sending and receiving 💬
We often hear that Zulip helps keep everyone in the loop, and in 2022, Zulip
Cloud users sent more messages to public streams than anywhere else.
Stream messages were read an average of …
We’re excited to announce the release of Zulip Server 6.0, containing hundreds
of new features and bug fixes!
Zulip is an open-source team chat application designed to
help people collaborate to solve any challenge. With conversations
organized by topic, Zulip is ideal
for both live and asynchronous …
We released Zulip Server 5.7 today! This is a security release, containing a
security fix and several cherry-picked changes since Zulip Server 5.6.
Upgrading
We recommend that all installations upgrade to this new release. See the
upgrade instructions
in the Zulip documentation. If you need help, best-effort …
This summer,
15 contributors
completed the Google Summer of Code
(GSoC) program with the
Zulip development community. This
was the 7th consecutive year that Zulip participated in GSoC; over 100
contributors have now completed one of our formal internship programs, primarily
through Google Summer of …
On July 18, 2022,
Slack announced that
starting September 1, search history for organizations on Slack’s Free plan will
be limited to just the past 90 days of message history.
Instead of a 10,000-message limit and 5 GB of storage, we are giving full
access to the past 90 days of message history and …
We released Zulip Server 5.6 today! This is a security release, containing an
important security fix and several cherry-picked changes since Zulip Server 5.5.
Upgrading
We recommend that all installations upgrade to this new release. See the
upgrade instructions
in the Zulip documentation. If you need …
We released Zulip Server 5.5 today! This is a security release, containing an
important security fix and several cherry-picked changes since Zulip Server 5.4.
Upgrading
We recommend that all installations upgrade to this new release. See the
upgrade instructions
in the Zulip documentation. If you need …
Administrators of Zulip Cloud organizations can
export public data
from their organization via the organization settings menu. The exports include
all the data that appears in public streams, and can be used to migrate from
Zulip Cloud to self-hosting Zulip. Note that exporting private data is a
separate …
We released Zulip Server 5.4 today! This is a security release, containing a
security fix and several cherry-picked changes since Zulip Server 5.3.
Upgrading
We recommend that all installations upgrade to this new release. See the
upgrade instructions
in the Zulip documentation. If you need help, best-effort …
We released Zulip Server 5.3 today! This is a security release, containing a
minor security fix and several cherry-picked changes since Zulip Server 5.2.
Upgrading
We recommend that all installations upgrade to this new release. See the
upgrade instructions
in the Zulip documentation. If you need help, …
Today, we’re delighted to announce the general availability of Zulip’s public
access option. Open-source projects and other open communities
can now offer one-click access
(no login required!) to part or all of their Zulip chat.
For those who are not familiar with it, Zulip is a modern
team collaboration …
We released Zulip Server 5.2 today! This is a bugfix release, containing
cherry-picked changes since Zulip Server 5.1.
Upgrading
We recommend that all installations upgrade to this new release. See the
upgrade instructions
in the Zulip documentation. If you need help, best-effort support is available
…
We released Zulip Server 5.1 today! This is a bugfix release, containing a few
cherry-picked changes since Zulip Server 5.0, primarily to address upgrading
bugs.
Upgrading
We recommend that all installations upgrade to this new release. See the
upgrade instructions
in the Zulip documentation. If you …
We’re excited to announce the release of Zulip Server 5.0, containing hundreds
of new features and bug fixes!
Zulip is an open-source team collaboration tool with
unique topic-based threading that is ideal for
both live and asynchronous conversations. Fortune 500 companies, leading
open-source projects, …
We released Zulip Server 4.11 today! This is a security release, containing a
minor security fix.
Upgrading
We recommend that all installations upgrade to this new release. See the
upgrade instructions
in the Zulip documentation. If you need help, best-effort support is available
on chat.zulip.org.
…
An internal investigation recently uncovered a vulnerability (identified as
CVE-2022-21706) in Zulip’s invitation links. Specifically, a
reusable invitation link
could be used to join a different organization than the one it was created for.
As a result, there was a potential for users to join any organization …
We released Zulip Server 4.10 today! This is a security release, containing
important security fixes, as well as important cherry-picked bug fixes, since
Zulip Server 4.9.
Upgrading
We strongly recommend that all installations upgrade to this new release. See
the
upgrade instructions
in the Zulip documentation. …
We released Zulip Server 4.9 today! This is a security release, containing
critical security fixes, as well as important cherry-picked bug fixes, since
Zulip Server 4.8.
Upgrading
We strongly recommend that all installations upgrade to this new release. See
the
upgrade instructions
in the Zulip documentation. …
This is an important security announcement for Zulip installations running the
main (development) branch of the Zulip server. The main branch of Zulip
Server, since
a commit merged on December 4th,
was vulnerable to a stored cross-site scripting vulnerability in stream names. A
malicious user with permission …
Quill, a team chat company with
$16 million in venture capital funding,
was acquired by Twitter and shut down their product last week. Users were given
a mere four days to export their data prior to deletion; direct messages and
private channels could not be exported at all.
Our sympathies go out to …
We released Zulip Server 4.8 today! This is a security release, containing
important security fixes, as well as important cherry-picked bug fixes, since
Zulip Server 4.7.
Deprecating support for Ubuntu 18.04 Bionic
With this release, we are deprecating support for Ubuntu 18.04 Bionic.
Specifically, …
This week, Discord
teased plans to
integrate a crypto asset wallet. After
backlash
from their user community, Discord clarified that the feature isn’t ready to
ship
“for now”.
With many popular social and chat apps already on the blockchain bandwagon
(including
Facebook,
Telegram,
Signal,
Twitter
and
…
We released Zulip Server 4.7 today! This is a security release, containing minor
security fixes since Zulip Server 4.6.
What’s new
This release fixes CVE-2021-41115, which prevents organization administrators
from affecting the server with a regular expression denial-of-service attack
through linkifier …
This summer, the
Zulip developer community welcomed
18 student participants
through the Google Summer of Code (GSoC)
program. This was the 6th consecutive year that Zulip participated in GSoC; more
than 85 students have now completed one of our formal internship programs,
primarily through Google Summer …
We released Zulip Server 4.6 today! This is a bug fix release, containing a few
dozen cherry-picked changes since Zulip Server 4.5.
What’s new
This release fixes the following issues:
Documented official support for Debian 11 Bullseye, now that it is officially
released by Debian upstream.
Fixed installation …
Zulip for Education is a new open-source team chat product used at university
departments around the world, including MIT, University of California San Diego
and Technical University of Munich, Germany.
SAN FRANCISCO, CA – July 26, 2021 – Zulip, the threaded
open-source team chat app with the most active …
We released Zulip Server 4.4 today! This is a security release, containing
important security fixes, as well as important cherry-picked bug fixes, since
Zulip Server 4.3.
What’s new
This release fixes the following issues:
Added a tool to fix potential database corruption caused by host OS upgrades;
…
We released Zulip Server 4.3 today! This is a bug fix release, containing a few
cherry-picked changes since Zulip Server 4.2.
What’s new
This release fixes the following issues:
Fixed exception when upgrading older servers that had disabled the Jitsi
integration by setting JITSI_SERVER_URL to None.
…
We’re excited to announce the release of Zulip Server 4.0, containing hundreds
of new features and bug fixes! Zulip is an open-source
team collaboration tool with unique
topic-based threading that combines the best of
email and chat to make remote work productive and delightful. Fortune 500
companies, …
At Zulip, we’re out to build the world’s best
collaboration platform, and we’re committed to keeping it 100% open source. If
you’ve been using Zulip, love the product and its
innovative threading model, and want to help
share it with the world, please consider
supporting us.
An important part of Zulip’s …
Zulip Server 3.4 was released today! This is a security release, containing
important security updates for the 3.x series of Zulip Server.
This will likely be the last release in the 3.x stable release series, as we are
getting close to publishing the first release candidate for Zulip 4.0.
What’s new
…
On Thursday, March 18, 2021, Zulip Cloud had an important security incident. In
short, a subtle caching bug resulted in up to 149 users being shown a broken
read-only version of the Zulip UI from one of 26 other users whose data was
incorrectly cached.
This malfunctioning interface did not display …
We released Zulip Server 3.3 today! This is a bug fix release, containing a few
cherry-picked changes since Zulip Server 3.2.
What’s new
This releases fixes multiple important bugs in previous versions of Zulip. It
contains fixes for the following issues:
Guest users
should not be allowed to post to …
Hosting Zulip on DigitalOcean is easy.
As an open source project, Zulip is committed to making it convenient for every
organization to use Zulip. For those who cannot maintain their own server, we
offer the convenient Zulip Cloud SaaS service. For
organizations concerned about privacy, data control, …
Interview with Founder and CEO Tim Abbott, and Building the Mathematical Library of the Future with Zulip
We released Zulip Server 3.2 today! This is a bug fix release, containing a few
cherry-picked changes since Zulip Server 3.1.
What’s new
This releases fixes multiple important bugs in previous versions of Zulip. It
contains fixes for the following issues:
Switched from libmemcached to python-binary-memcached, …
Today we released Zulip Desktop 5.4.3, fixing a security issue:
CVE-2020-24582: Zulip Desktop failed to escape various strings interpolated
into the user interface HTML. This could result in code execution when
connecting to a maliciously altered Zulip server.
The Zulip security team discovered this …
We released Zulip Server 3.1 today. This is a bug fix release, containing a few
dozen cherry-picked changes since Zulip Server 3.0.
What’s new
This releases fixes multiple important bugs in previous versions of Zulip. It
contains fixes for the following issues:
Removed unused short_name field from …
We’re excited to announce the release of Zulip Server 3.0, containing hundreds
of new features and bug fixes to help distributed and remote teams stay
productive and focused.
Zulip is the open-source threaded team chat app, used by
thousands of teams globally. Zulip’s unique
topic-based threading experience …
We released Zulip Server 2.1.7 today. This is a security release, containing a
couple cherry-picked changes since Zulip Server 2.1.6.
What’s new
This releases fixes multiple important bugs in previous versions of Zulip. It
contains fixes for the following issues:
CVE-2020-15070: Fix privilege escalation …
We released Zulip Server 2.1.5 today. This is a security release, containing a
dozen cherry-picked changes since Zulip Server 2.1.4.
What’s new
This releases fixes several important bugs in previous versions of Zulip. It
contains fixes for the following issues:
CVE-2020-12759: Fix reflected XSS vulnerability …
Zulip Responds to the Pandemic with 60-Day Free Trial. Zulip helps distributed teams and communities increase productivity and communicate more effectively.
Today we released Zulip Desktop 5.2.0, fixing a critical security issue:
CVE-2020-12637: Zulip Desktop 0.5.10 introduced a certificate validation
handler to support the undocumented ignoreCerts option available by manually
editing the configuration file. However, the handler inadvertently disabled
…
We released Zulip Server 2.1.4 today. This is a bug fix release, containing
several cherry-picked changes since Zulip 2.1.3.
What’s new
This releases fixes a few important bugs in previous versions of Zulip. It
contains fixes for the following issues:
Fixed a regression in 2.1.3 that impacted creating …
We released Zulip Server 2.1.3 today. This is a security release, containing a
few dozen cherry-picked changes since Zulip 2.1.2.
What’s new
This releases fixes several important bugs in previous versions of Zulip. It
contains fixes for the following issues:
CVE-2020-9444: Reverse tabnabbing vulnerability …
Today we released Zulip Desktop 5.0.0, fixing multiple critical security issues
as well as several other important issues:
CVE-2020-10856: Remote code execution due to missing context isolation.
CVE-2020-10857: Remote code execution due to unsafe use of shell.openExternal
and shell.openItem.
Downloaded …
Today we released Zulip Desktop 4.0.3, fixing a critical security issue:
CVE-2020-9443: Web security was disabled in the Electron webview.
This is a critical security issue because Zulip’s security model for uploaded
files relies on the browser (in this case Electron) enforcing the web security
model. …
We released Zulip Server 2.1.2 today. This is a security release, containing a
few dozen cherry-picked changes since Zulip 2.1.1.
What’s new
This releases fixes several important bugs in previous versions of Zulip. It
contains fixes for the following issues:
Corrected fix for CVE-2019-19775 (the original …
We released Zulip Server 2.1.1 today. This is a bug fix release, containing
several cherry-picked changes since Zulip 2.1.1.
What’s new
This releases fixes a few important bugs in previous versions of Zulip. It
contains fixes for the following issues:
Fixed upgrading to 2.1.x with the LDAP integration …
We’re excited to announce the release of Zulip Server 2.1, containing hundreds
of new features and bug fixes.
Zulip is the world’s most productive team chat
software, used by thousands of teams as an alternative to Slack, HipChat,
Mattermost and IRC. Zulip’s unique
topic-based threading combines the …
We released Zulip Server 2.0.8 today. This is a security release, containing a
handful of cherry-picked changes since Zulip 2.0.7.
What’s new
This release fixes a security bug in Zulip 1.9.0 and greater:
CVE-2019-19775: Close open redirect in thumbnail view.
Upgrading
All installations should upgrade …
We released Zulip Server 2.0.7 today. This is a security release, containing a
handful of cherry-picked changes since Zulip 2.0.6.
What’s new
This release fixes an important security bug in previous versions of Zulip.
Quoting from
the commit
fixing it:
CVE-2019-18933: Fix insecure account creation via …
We released Zulip Server 2.0.6 today. This is a bug fix release, containing
several cherry-picked changes since Zulip 2.0.5.
What’s new
This releases fixes a few important bugs in previous versions of Zulip. It
contains fixes for the following issues:
Updated signing keys for the PGroonga repository …
We released Zulip Server 2.0.5 today. This is a security release, containing a
handful of cherry-picked changes since Zulip 2.0.4.
What’s new
This releases fixes a few important bugs in previous versions of Zulip. It
contains fixes for the following security issues:
CVE-2019-16215: Fix DoS vulnerability …
We released Zulip Server 2.0.4 today. This is a bug fix release, containing a
dozen cherry-picked changes since Zulip 2.0.3.
What’s new
This releases fixes a few important bugs in Zulip 2.0.3. It contains the
following changes:
Fixed several configuration-dependent bugs that caused restore-backup to
…
We released Zulip Server 2.0.3 today. This is a bug fix release, containing a
few dozen cherry-picked changes since Zulip 2.0.2.
What’s new
This releases fixes a few important bugs in Zulip 2.0.2. It contains the
following changes:
Added documentation for
upgrading the underlying OS version.
Made uwsgi …
We released Zulip Server 2.0.2 today. This is a bug fix release, containing a
dozen cherry-picked changes since Zulip 2.0.1.
What’s new
This releases fixes a few important bugs in Zulip 2.0.1. It contains the
following changes:
Fixed a regression in the puppet configuration for S3 upload backend that …
We released Zulip Server 2.0.1 today. This is a bug fix release, containing a
dozen cherry-picked changes since Zulip 2.0.0.
What’s new
This releases fixes a few important bugs in Zulip 2.0.0. It contains the
following changes:
Fixed handling of uploaded file routing on Ubuntu Trusty.
Fixed buggy behavior …
We’re excited to announce the release of Zulip Server 2.0, containing hundreds
of new features and bug fixes.
Zulip is the world’s most productive team chat
software, used by thousands of teams as an alternative to Slack, HipChat,
Mattermost and IRC. Zulip’s unique
topic-based threading combines the …
We released Zulip Server 1.9.2 today. This is a bug fix release, containing a
few dozen cherry-picked changes since 1.9.1.
What’s new
This release is primarily to migrate Zulip off the deprecated Google+ API, which
Google plans to remove entirely on March 9. It also contains a few bug fixes for
the …
We released Zulip Server 1.9.1 today. This is a bug fix release, containing a
few dozen cherry-picked changes since 1.9.0.
What’s new
This release is primarily to improve the experience for users installing a new
Zulip server: new installer options, better error messages, etc.
This release contains …
We’re excited to announce the release of Zulip Server 1.9, containing hundreds
of new features and bug fixes. Especially relevant for users migrating from the
recently discontinued HipChat
is our new HipChat data import
tool.
Zulip is the world’s most productive team chat
software, an alternative to …
Today we’re releasing Zulip Server 1.8.1. This is a bug fix release, containing
a few dozen cherry-picked changes since 1.8.0.
What’s new
The highlights of this release are primarily for folks installing a new Zulip
server: a tool for automatically registering for push notifications, and a bunch
of …
We’re excited to announce the release of Zulip Server 1.8, containing hundreds
of new features and bug fixes.
Zulip is the world’s most productive team chat software,
an alternative to Slack, HipChat, and IRC. Zulip combines the immediacy of chat
with the asynchronous efficiency of email-style threading, …
Today we’re releasing Zulip Server 1.7.2. This is a security release, containing
just a handful of cherry-picked changes since 1.7.1.
What’s new
This release fixes several security issues:
CVE-2018-9986: Fix XSS issues with frontend markdown processor.
CVE-2018-9987: Fix XSS issue with muting notifications.
…
Today we’re releasing Zulip Server 1.7.1. This is a security release, containing
just a handful of cherry-picked changes since 1.7.0.
To readers in the US: happy Thanksgiving! We generally avoid making a security
release just before a major holiday, but we’ve made an exception in this case
because the …
We’re excited to announce the release of Zulip Server 1.7, containing hundreds
of new features and bug fixes.
Zulip is the world’s most productive team chat software,
an alternative to Slack, HipChat, and IRC. Zulip combines the immediacy of chat
with the asynchronous efficiency of email, and is 100% …
We’re excited to announce the release of Zulip Server 1.6.0, containing hundreds
of new features and bug fixes.
Zulip is the world’s most productive group chat software.
Zulip combines the immediacy of chat with the asynchronous efficiency of email,
and is 100% free and open source software.
This is …
Over the last few years, static type checkers have become available for popular
dynamic languages like PHP (Hack) and JavaScript
(Flow and
TypeScript), and have seen wide adoption. Two
years ago, a
provisional syntax for static type annotations
was added to Python 3. However, static types in Python …
Mateusz Mandera
Tim Abbott
Alya Abbott
Alex Vandiver
Greg Price
Matt Keller
Trent Lapinski
Anders Kaseorg