January 2005 - Zope-Announce

[Security advisory] Zope 2.7 + 2.8
by Andreas Jung 12 Jan '05

12 Jan '05

Synopsis: Due to an error in the cAccessControl module of Zope it is possible to bring down a complete Zope site as documented in http://mail.zope.org/pipermail/zope-dev/2004-December/024087.html This exploit causes a segmentation fault of the Python interpreter. Vulnerable for this exploit are at least all Zope installations that allow untrusted users to edit ZPTs (possibly DTML as well) either through the ZMI or through the file system. Affected versions: Zope 2.7.X, Zope 2.8.X Recommended solution: Turn off cAccessControl and enable the Python AccessControl implementation in etc/zope.conf (this line is commented in the default configuration): security-policy-implemenation python A fixed implementation of cAccessControl will be included in the upcoming Zope 2.7.4 beta 2 release. ---- Andreas Jung Zope 2 Release Manager

2 1

ZODB 3.3.1 alpha 1 released
by Tim Peters 11 Jan '05

11 Jan '05

I'm pleased to announce the release of ZODB 3.3.1 alpha 1 (ZODB 3.3.1a1). You can download a source tarball or Windows installer from: http://zope.org/Products/ZODB3.3 A number of critical bugfixes have been made since 3.3 final, including several in the 3.3 ZEO cache. Please see the NEWS file for details: http://zope.org/Products/ZODB3.3/NEWS.html ZODB 3.3 supports Zope X3, and current Zope 2.8 trunk development. Zope 3 has outgrown the 3.3 line, and requires new features in ZODB 3.4 (for which no standalone release is yet available). ZODB 3.3 does not support any version of Zope 2.6 or 2.7.

1 0

Infrae pre-announces Silva 1.2
by Martijn Faassen 10 Jan '05

10 Jan '05

Infrae pre-announces Silva 1.2 ============================== 12 january 2004 – Infrae is pleased to announce that the Silva 1.2 beta will be released on january 21st. This release contains three major new features: expanded version management for XML documents, subscription functionality for all versioned content, and an internationalized Silva user interface, including Dutch and German translations. Infrae is actively seeking volunteers to translate Silva into other languages. Version management ------------------ Silva 1.2 exposes additional version management capability to the user interface. It leverages Silva’s powerful multi-version system, where content can be online while a new version is simultaneously prepared. The version management feature allows: * reviewing older versions of content objects * comparing different versions side-by-side * reverting to older versions of content * removing of selected old versions Subscriptions ------------- Silva 1.2 adds the subscriptions feature, which allows end-users to subscribe to public web pages. As soon as a new version of a page gets (re)published, the subscribed user receives an email notification. It’s even possible to subscribe to changes on a content hierarchy – but only if this has been allowed using the subscription management UI, which allows for fine-grained ‘subscribability’ for content. On the more technical side it is noteworthy that the subscription feature has been designed to be scalable over many subscribers. Internationalization -------------------- Silva 1.2 has now been fully internationalized. This means that the Silva user interface can now be presented a wide range of languages. Besides the original UI in English, Silva 1.2 will also ship with a German and a Dutch translation. We’re eager to have contributors help with the translation effort to other languages! If you’re interested in providing translations to other languages, or if you wish to test an existing translation, please contact the Silva developers at: http://lists.infrae.com/mailman/listinfo/silva-dev and we will help you get started. Release timing -------------- The Silva 1.2 beta will be released on the 21st of january. The final will be released one month later (beta testers please report test results by the middle of february, via the Silva Issue Tracker at http://issues.infrae.com/silva/; assign a topic of Silva-1.2 to any reports). Upgrading --------- The upgrade from Silva 1.1 to 1.2 is minor, requiring one click on an upgrade button. The upgrade doesn’t affect any data, so a content freeze is not necessary, and the upgrade can normally be completed within a single maintenance window. For more information see the UPGRADE.txt that will ship with the release. What is Silva? -------------- Silva is an enterprise-class CMS for managing content for the web, print, and other media. Content is stored in clean and future-proof XML, independent of layout and presentation. Features include a multi-version workflow system, XSLT rendering support, integral WYSIWYG editor (Kupu), content reuse in multiple publications, sophisticated access management, extensive import/export facilities, fine-grained templating, and hi-res image storage and manipulation. Silva is entirely open source. More information ---------------- * http://www.infrae.com/products/silva * http://www.infrae.com Press Contact ------------- Martijn Faassen, faassen at infrae com

1 0

[ANN] ATSchemaEditorNG 0.2.2 released
by Andreas Jung 08 Jan '05

08 Jan '05

I am please to announce the release of ATSchemaEditorNG 0.2.2. ATSchemaEditorNG is a framework to allow through-the-web schema editing functionalities for your AT content type. The integration of ATSchemaEditorNG is very easy and for example used in PloneCollectorNG. Changes in V 0.2.2 - schemas can be exported as text - Schemas can now be managed through a tool (SchemaEditorTool.py) and not only through a folder. - new client mixin class ToolManagedSchema - persistency fix in schema registration ----------------------------------------------------------------------- - Andreas Jung ZOPYX Software Development and Consulting - - E-mail: info(a)zopyx.com Web: www.zopyx.com - -----------------------------------------------------------------------

1 0

[ANN] TextIndexNG 2.2.0 beta 1 released
by Andreas Jung 08 Jan '05

08 Jan '05

I am pleased to announce the release of TextIndexNG 2.2.0 beta 1 Changes in 2.2.0b1: - added support for thesauri (see TextIndexNG release notes for details) TextIndexNG homepage: http://www.zopyx.com/OpenSource/TextIndexNG Download http://www.zope.org/Members/ajung/TextIndexNG

1 0

[ANN] Zope 2.7.4 RC 2 released
by Andreas Jung 07 Jan '05

07 Jan '05

Dear Zope Community, on behalf of Zope Corporation and all Zope 2 developers and contributors I am pleased to announce the release of Zope 2.7.4 RC2. This release is a maintenance release and fixes a lot of bugs (too much to mention them all here). Zope 2.7.4 RC 2 can be downloaded from http://www.zope.org/Products/Zope/2.7.4rc2 The release notes can be found at http://www.zope.org/Products/Zope/2.7.4rc2/CHANGES.txt For informations on using Python 2.4 with Zope 2.7: see doc/INSTALL.txt Andreas Jung

1 0

[ANN] CMFDeployment Beta 4
by Kapil Thangavelu 07 Jan '05

07 Jan '05

CMFDeployment - Beta 4 ObjectRealms is pleased to announce the renewed development and production usage of cmfdeployment. About -------- CMFDeployment Allows for allows for static deployment of a CMF site to multiple target systems akin to the deployment features of advanced commerical CMS systems like interwoven or vignette. It shifts the burden of content delivery from the cms (plone/cmf) to systems optimized for such. New in this Release --------------------------- - compatibility w/ CMF1.4 and Plone2 - support of multi-resource content, for example Archetypes content with schema Images or Files. - a unit test suite based on ZopeTestCase. More Information ----------------------- A complete list of features, downloads, and project resources can be found here http://projects.objectrealms.net/projects/cmfdeployment Thanks --------- many thanks to tahara yusei and calvin hendryx-parker who contributed to this release. CMFDeployment is developed and supported by ObjectRealms. http://www.objectrealms.net - Vision Implemented

1 0

[ANN] Simplates 0.2.0 released
by Chad Whitacre 05 Jan '05

05 Jan '05

Dear All, Simplates 0.2.0 is now available at http://simplates.zetaweb.com/. Simplates ("simple templates") is a Python package written for Zope. Think of it as a simpler alternative to DTML for cases where ZPT can't (and shouldn't) be used, that is, for non-XML content. Simplates are great for dynamic plain-text formatting. Try them for: * CSS * JavaScript * SQL * plain-text email Thank you. yours, Chad Whitacre

1 0

SfleX - Software Flexibility Prototype in Zope
by gautam.shroff＠tcs.com 03 Jan '05

03 Jan '05

So much of software development/maintenance in IT departments is in response to small changes in functionality - new fields, workflows, etc. Yes, there are a lot of development tools that help automate this - but they are just that - development tools; analysts can't use them. At TCS we've been working on automated code generation for a decade. Recently we have started to focus on interpretation, i.e. instead of generating from specs, interpret. (A lot of interest in this these days, esp XML etc.) Increasing computing power makes this possible - in my opinon. But we would also like the specs to be configured in an application that is accessible by analysts (not only programmers). We have created a prototype as a Zope application and released it for demo and download(under GPL), and are seeking FEEDBACK AND COMMENTS. See http://sflex.ilab-tcs.com We would also like to welcome anyone interested in contributing to the development of the Zope version - making it a product, using it, etc. See http://zope.org/Members/shroff (should get published soon) Thanks, Gautam Shroff Technology Innovation Lab Tata Consultancy Services Notice: The information contained in this e-mail message and/or attachments to it may contain confidential or privileged information. If you are not the intended recipient, any dissemination, use, review, distribution, printing or copying of the information contained in this e-mail message and/or attachments to it are strictly prohibited. If you have received this communication in error, please notify us by reply e-mail or telephone and immediately and permanently delete the message and any attachments. Thank you

1 0

[ANN] Zwiki 0.37 released
by Simon Michael 03 Jan '05

03 Jan '05

Summary: Improved rating form, a file -> wiki page import tool, chinese & hungarian translation updates, bugfixes. Last release was 0.37rc1 on 11/30; there was no december release. Burned out! Traffic on the zwiki list, UserDiscussion page and #zwiki channel have been steady. There's now also a related blog at http://joyfulsystems.blogspot.com . Happy new year, everyone. -Simon http://zwiki.org http://zwiki.org/ReleaseNotes Zwiki 0.37.0 2005/01/02 Summary Improved rating form, a file -> wiki page import tool, chinese & hungarian translation updates, bug fixes. Last release was 0.37rc1 on 11/30; there was no december release. Changes Editing * avoid creating both pages when you rename during page creation drop the leaveplaceholder and updatebacklinks arguments from create(). Changing the page name in the create form now always updatesbacklinks, never leaves a placeholder. Rating * rating could fail when there was only one vote * make rating's average a little more accurate Mail * workaround for clumsy mailhost lookup (#938) Issue tracking * don't match xml/html character entities as hash number issue links (Stefan Rank) General - i18n * hungarian translation updates (Jaroli József) * po file typo (T.C. Chou) General - skins * use canonicaIdFrom to help link user names in recent changes * change RecentChanges ZCatalog query-style to avoid deprecation warning (Stefan Rank) General * add tools folder and a basic import-files-to-wiki utility Zwiki 0.37.0rc1 2004/11/30 Changes Page hierarchy * make updateWikiOutline redirect to the updated contents view, and provide an easier alias: updatecontents * don't log a traceback when deleting a page with out-of-date outline cache Rating * new compact rating form at top right. Unrated pages now have rating 1 by default. Mail * mailin: don't log incoming message text or traceback for missing text part * make mailout logging less verbose * fix a bug preventing subscribe link from appearing when mailhost's id is not 'MailHost' General - i18n * zh-TW and zh-CN translation updates (T.C. Chou) * add missing metadata to finnish po files General - skins * close a cross-site scripting vulnerability in standard error message (SSA-20041122-12, #925, ChrisW) * Hide web only elements when printing from plone (Michael Twomey) When printing from plone certain elements are visible on the printed page, especially the access links. With the default plone print style (plonePrint.css) all links get expanded to full URLs which results in a lot of useless junk at the top of the screen. This patch adds a few plone related CSS classes to certain sections of the page which in turn ensures they aren't visible when printed. This has no effect on browsers which aren't aware of the print style sheet. The access keys still work fine in FireFox 1.0. * fix html title in plone sites * rearrange/reword wiki actions in cmf/plone, drop filter issues action * tweak page management help in cmf/plone * display site_header in standard skin header, if present

1 0