Zwiki 0.54 has been released. This one comes you from the garden, in
lovely county Wicklow. Thanks for all bug reports and input.
An announcement from Joyful Systems: my current consulting gig is
winding down; it's time for me to do something new, creative,
financially rewarding. This could mean a greater focus on Zwiki. If you
need Zwiki/Zope/Squeak/Unix consulting, or have any other thoughts on
this, let me know!
Best, -Simon
Summary
Miscellaneous view-related and general enhancements.
Upgrade notes
CMF/Plone users: the zwiki_standard and zwiki_plone skin layers
have been replaced by a single zwiki layer. Re-install Zwiki in
your CMF/Plone sites, using Plone's add/remove products or CMF's
quickinstaller, to register the new skin layer. Also remove the
zwiki_standard and zwiki_plone skin layers from your skins in
portal_skins -> Properties.
Changes
Installing
* cleaned up ZMI Add ZWiki and Add ZWiki Page forms
* remove _getViewFor import that broke with CMF 2.0
* fix upgradeAll's batch option
Browsing
* /myvotes view shows your votes in this wiki
* highlight your current vote for this page, if any
Editing
* support a max_identified_links property also, for
cookie-identified users (for now)
* edit history enhancements, a more useful diff browser and more
powerful revert methods. Renames can now be reverted, reverting
is more reliable, and appropriate mail notifications are sent.
General
* replace zwiki_standard and zwiki_plone with just skins/zwiki
* Views code cleanup
* simplify definition of view macros and make them refresh
immediately in debug mode
* more code docs
* don't bother identifying the catalog in event log
Urls:
- http://zwiki.org - start here
- http://zwiki.org/FreeHosting - free experimental zwiki hosting
- http://joyful.com - zwiki demos and other zwikis
- http://joyfulsystems.blogspot.com - blog
Hello everyone,
WebFaction have just released a screencast demo showing a step by step
installation of a Zope and Plone site and product on their servers.
The 10 minute screencast shows how to:
- Create a Zope application using the control panel and mount it on some
domains
- Access the ZMI and create a Plone site
- Use the VirtualHostMonster to run Plone at the root of the website
- Add a new product and restart Zope
- Run two websites from the same Zope instance
The screencast is available at:
http://blog.webfaction.com/zope-and-plone-screencast
Remi.
http://www.webfaction.com - Hosting for an agile web
I am pleased to announce the release of TextIndexNG V 3.1.12
TextIndexNG V 3 is a complete new implementation based on Zope 3
technologies and can be used both in Zope 2.8+ or in Zope 3.2+
What's new?
- multi-field indexing and query support
- multi-lingual support
- configurable converters (through ZCML)
- new indexing API (allowing you to hook your custom content types with
TextIndexNG through Zope 3 adapters).
Changes in V 3.1.12:
- fixed compatibility issue with Zope 2.9+ that caused a failure of the
manage_workspace view within the ZMI
Requirements:
- Zope 2.8+, Zope 3.2+
Download:
http://sf.net/projects/textindexng
Project page:
http://opensource.zopyx.biz/OpenSource/TextIndexNG3
TextIndexNG V 3 is published under the ZPL.
Andreas Jung
-----------------------------------------------------------------------
- Andreas Jung ZOPYX Ltd. & Co KG -
- E-mail: info(a)zopyx.com Web: www.zopyx.com, www.zopyx.de -
-----------------------------------------------------------------------
Lovely Systems and Philipp von Weitershausen are happy to announce the
arrangement of a "Lovely Zope 3 Training" on 3 thru 6 Oct 2006 in
Copenhagen, Denmark.
Aimed at the Python web developer, this 4-day training will cover
every aspect of the Zope 3 application server you need to know for
developing your own web apps. Philipp, a Zope 3 developer and author
of the book "Web Component Development with Zope 3," will introduce
you to Zope and its Component Architecture. You will learn everything
from Zope's object database, the automatic form machinery, and its
templating and skinning system to internationalizing and securing your
web application, and much much more.
For more information on the training location, the detailed training
agenda and pricing, please refer to
http://lovelysystems.com/training/lovely-zope-3-training-copenhagen.
Sign up today!
Looking forward to seeing you in Copenhagen,
Philipp
Hi all,
on behalf of Zope Corporation and the Zope community I am pleased to
announce the release of Zope 2.9.4.
This bugfix release corrects the information exposure vulnerability
addressed in the "2007/07/05 Hotfix.",
http://www.zope.org/Products/Zope/Hotfix-2006-07-05 You may remove that
hotfix product from your instances after upgrading to this version of Zope.
You can download it from
http://www.zope.org/Products/Zope/2.9.4/
Some new features of Zope 2.9:
- ZODB 3.6
- Five 1.3
- integration for Zope 3 events for object creation and deletion
- Zope 3 i18n integration for page templates
For more information on what is new in this release, see the
CHANGES.txt files for the release:
http://www.zope.org/Products/Zope/2.9.4/CHANGES.txt
Please bring all the bugs you have found to the Zope bugtracker:
"http://collector.zope.org/Zope":http://collector.zope.org/Zope
For more information on the available Zope releases, guidance for selecting
the right distribution and installation instructions, please see:
http://www.plope.com/Books/2_7Edition/InstallingZope.stx
Supported Python versions:
Zope 2.9 requires Python 2.4.3 (Python 2.4.1, 2.4.2 are still acceptable).
Older Python versions are no longer supported.
--
Andreas Jung (andreas at zopyx dot com)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Zope 2.8.8 Released
On behalf of Zope Corporation and the Zope community I am pleased
to announce the release of Zope 2.8.8. You can download the sources
from "http://www.zope.org/Products/Zope/2.8.8/",
http://www.zope.org/Products/Zope/2.8.8
This bugfix release corrects the information exposure vulnerability
addressed in the "2007/07/05 Hotfix.",
http://www.zope.org/Products/Zope/Hotfix-2006-07-05
You may remove that hotvix product from your instances after upgrading
to this version of Zope.
New features of Zope 2.8.x
- ZODB 3.4 with MVCC (multi version concurrency control) support.
MVCC solves nearly every problem with ZODB read-conflict errors
which is very important for high-traffic Zope sites.
- Extension Classes were rewritten as Python new-style classes making
all features of Python new-style classes available in Zope
objects. This includes support for cyclic garbage collection.
- Integration of Zope 3 technologies through Five
(see http://codespeak.net/z3/five/)
More Information
For more information on what is new in this release, see the
CHANGES.txt files for the release:
"http://www.zope.org/Products/Zope/2.8.8/CHANGES.txt",
http://www.zope.org/Products/Zope/2.8.8/CHANGES.txt
See also:
"http://www.zope.org/Wikis/DevSite/Projects/Zope2.8/OverView"
http://www.zope.org/Wikis/DevSite/Projects/Zope2.8/OverView
For more information on the available Zope releases, guidance for
selecting the right distribution and installation instructions,
please see:
"http://www.plope.com/Books/2_7Edition/InstallingZope.stx",
http://www.plope.com/Books/2_7Edition/InstallingZope.stx
Reporting Bugs
Please report all the bugs you have found to the Zope bugtracker:
"http://collector.zope.org/Zope",
http://collector.zope.org/Zope
Supported Python versions
At this time the only **supported** and **recommended** Python
versions are 2.3.4 and 2.3.5.
Using Python 2.4.X is **not supported** and **not recommended** at
this time. Python 2.4.X will be supported when a security audit takes
place. This means that you are using Python 2.4 + Zope 2.8 at **your
own risk**. This warning also applies to binary packages that install
Zope packages together with a system wide Python 2.4 installation
(e.g. Fedora, SuSE...). Such installations are in general not
supported. In addition there some third-party products and Python
packages that don't work with Python 2.4 and can cause trouble when
using Python 2.4.
Tres.
- --
===================================================================
Tres Seaver +1 202-558-7113 tseaver(a)palladion.com
Palladion Software "Excellence by Design" http://palladion.com
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2.2 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFEuB6X+gerLs4ltQ4RAofcAJ9lX+PxqXvlOv8Dl8tnxq2H/NLACwCfW5zN
h2S/BSncs4Vb3BNBVeydsv0=
=uDd5
-----END PGP SIGNATURE-----
(Apologies for the especially late notice; for some reason these
announcements did not go out when I sent them Monday to python-
announce-list and zope-announce)
Please join us Wed., July 12, 7:30-9:00 PM, for another meeting of
the Fredericksburg, VA Zope and Python User Group ("ZPUG"). We will
have a presentation, a lightning talk, a roundtable, and some good
snacks.
- Jim Fulton will present the talk he gave last week at EuroPython on
zc.buildout. The zc.buildout project provides support for creating
applications, especially Python applications. It provides tools for
assembling applications from multiple parts, Python or otherwise.
See http://svn.zope.org/zc.buildout/trunk/.
- John Kimball will present a lightning talk of Fortran in Python.
- We will have a roundtable discussion of Python and Zope topics.
Gary
----------------------------------------
General ZPUG information
When: second Wednesday of every month, 7:30-9:00.
Where: Zope Corporation offices. 513 Prince Edward Street;
Fredericksburg, VA 22408 (tinyurl for map is http://tinyurl.com/duoab).
Parking: Zope Corporation parking lot; entrance on Prince Edward Street.
Topics: As desired (and offered) by participants, within the
constraints of having to do with Python or Zope.
Mailing list: fredericksburg-zpug(a)zope.org
Contact: Gary Poster (gary(a)zope.com)
Please join us Wed., July 12, 7:30-9:00 PM, for another meeting of
the Fredericksburg, VA Zope and Python User Group ("ZPUG"). We will
have a presentation, a lightning talk, a roundtable, and some good
snacks.
- Jim Fulton will present the talk he gave last week at EuroPython on
zc.buildout. The zc.buildout project provides support for creating
applications, especially Python applications. It provides tools for
assembling applications from multiple parts, Python or otherwise.
See http://svn.zope.org/zc.buildout/trunk/.
- John Kimball will present a lightning talk of Fortran in Python.
- We will have a roundtable discussion of Python and Zope topics.
Gary
----------------------------------------
General ZPUG information
When: second Wednesday of every month, 7:30-9:00.
Where: Zope Corporation offices. 513 Prince Edward Street;
Fredericksburg, VA 22408 (tinyurl for map is http://tinyurl.com/duoab).
Parking: Zope Corporation parking lot; entrance on Prince Edward Street.
Topics: As desired (and offered) by participants, within the
constraints of having to do with Python or Zope.
Mailing list: fredericksburg-zpug(a)zope.org
Contact: Gary Poster (gary(a)zope.com)
________________________________________________________________________
ANNOUNCEMENT
EGENIX.COM
mxODBC Zope Database Adapter
Version 1.0.10
Usable with Zope and the Plone CMS.
Available for Zope 2.3 through 2.10 on
Windows, Linux, Mac OS X, Solaris and FreeBSD
________________________________________________________________________
INTRODUCTION
The eGenix mxODBC Zope Database Adapter allows you to easily connect
your Zope or Plone installation to just about any database backend on
the market today, giving you the reliability of the commercially
supported eGenix product mxODBC and the flexibility of the ODBC
standard as middle-tier architecture.
The mxODBC Zope Database Adapter is highly portable, just like Zope
itself and provides a high performance interface to all your ODBC data
sources, using a single well-supported interface on Windows, Linux,
Mac OS X, Solaris and FreeBSD.
This makes it ideal for deployment in ZEO Clusters and Zope hosting
environments where stability and high performance are a top priority,
establishing an excellent basis and scalable solution for your Plone
CMS.
________________________________________________________________________
NEWS
We are pleased to announce a new version of our mxODBC Zope DA product.
The Zope DA now fully supports 64-bit ODBC. A problem with 64-bit
integers has been resolved in this release.
Also new in this release is support for the upcoming Zope 2.10. We
have successfully tested the mxODBC Zope DA with the latest beta
of the upcoming Zope version.
________________________________________________________________________
UPGRADING
If you have already bought mxODBC Zope DA 1.0.x licenses, you can use
these license for the 1.0.10 version as well. There is no need to buy
new licenses. The same is true for evaluation license users.
________________________________________________________________________
MORE INFORMATION
For more information on the mxODBC Zope Database Adapter, licensing
and download instructions, please visit our web-site:
http://zope.egenix.com/
You can buy mxODBC Zope DA licenses online from the eGenix.com shop at:
http://shop.egenix.com/
________________________________________________________________________
Thank you,
--
Marc-Andre Lemburg
eGenix.com
Professional Python Services directly from the Source (#1, Jul 10 2006)
>>> Python/Zope Consulting and Support ... http://www.egenix.com/
>>> mxODBC.Zope.Database.Adapter ... http://zope.egenix.com/
>>> mxODBC, mxDateTime, mxTextTools ... http://python.egenix.com/
________________________________________________________________________
::: Try mxODBC.Zope.DA for Windows,Linux,Solaris,FreeBSD for free ! ::::
Recently, a serious security flaw was found in Zope 2 due to it's
improper support for allowing reStructuredText to be edited through-
the-web. reStructuredText has directives that allow inclusion of any
file a Zope process could read and inclusion of data obtained from
fetching arbitrary URLs. In a trusted environment, these directives
have legitimate uses. The feature of including files and URL results
should not be enabled for text entered from untrusted sources, which
applies to most through-the-web interactions.
The recent hotfix:
http://www.zope.org/Products/Zope/Hotfix-2006-07-05/Hotfix-2006-07-05
addresses the problem for Zope 2.
It is safe to allow reStructuredText through the web with care. The
inclusion of files or URL results can be disabled, but the programmer
must explicitly disable the feature. It is not disabled by default.
It is also critical that a developer who exposes through-the-web
reStructuredText have tests to verify that the file/url inclusion
feature has been disabled.
Zope 3 itself, as released, doesn't have this problem because it
doesn't allow reST entry through the web. There are third-party
applications, however, including 2 packages in the Zope 3 subversion
tree that do have this problem. I strongly urge you to avoid using
any Zope package that allows through-the-web input of
reStructuredText unless you can verify that file/url has been
properly disabled.
The zwiki and bugtracker packages do not currently disable file/url
inclusion and should not be used in situations in which users who are
not highly trusted have access to these applications. If you are
using a Zope 3 checkout, these packages are currently included and
enabled. I plan to remove these packages from the Zope 3 repository
tree within the next few hours. If you are using a checkout-based
Zope 3 installation that exposes these packages to untrusted users,
you are strongly urged to disable these packages by removing the
following files from your package-includes directory:
zwiki-configure.zcml
bugtracker-configure.zcml
Removing these files will also avoid problems when you update your
checkout later, as these will refer to non-existent packages.
Jim
--
Jim Fulton mailto:jim@zope.com Python Powered!
CTO (540) 361-1714 http://www.python.org
Zope Corporation http://www.zope.comhttp://www.zope.org