We just released Zulip Server 10.2. This is a security release, fixing a critical security issue for installations with certain authentication configurations detailed in the
blog post. We recommend upgrading immediately if you have an affected configuration; if that's not possible, an effective mitigation is to
require invitations to create an account.
This release also fixes several other bugs, most importantly a collection of issues that prevented servers using some S3-compatible block storage services from successfully uploading files using the web application on Zulip Server 10.0 and 10.1.
