July 2006 - Zope-Announce

Zwiki 0.54 released
by Simon Michael 01 Nov '06

01 Nov '06

Zwiki 0.54 has been released. This one comes you from the garden, in lovely county Wicklow. Thanks for all bug reports and input. An announcement from Joyful Systems: my current consulting gig is winding down; it's time for me to do something new, creative, financially rewarding. This could mean a greater focus on Zwiki. If you need Zwiki/Zope/Squeak/Unix consulting, or have any other thoughts on this, let me know! Best, -Simon Summary Miscellaneous view-related and general enhancements. Upgrade notes CMF/Plone users: the zwiki_standard and zwiki_plone skin layers have been replaced by a single zwiki layer. Re-install Zwiki in your CMF/Plone sites, using Plone's add/remove products or CMF's quickinstaller, to register the new skin layer. Also remove the zwiki_standard and zwiki_plone skin layers from your skins in portal_skins -> Properties. Changes Installing * cleaned up ZMI Add ZWiki and Add ZWiki Page forms * remove _getViewFor import that broke with CMF 2.0 * fix upgradeAll's batch option Browsing * /myvotes view shows your votes in this wiki * highlight your current vote for this page, if any Editing * support a max_identified_links property also, for cookie-identified users (for now) * edit history enhancements, a more useful diff browser and more powerful revert methods. Renames can now be reverted, reverting is more reliable, and appropriate mail notifications are sent. General * replace zwiki_standard and zwiki_plone with just skins/zwiki * Views code cleanup * simplify definition of view macros and make them refresh immediately in debug mode * more code docs * don't bother identifying the catalog in event log Urls: - http://zwiki.org - start here - http://zwiki.org/FreeHosting - free experimental zwiki hosting - http://joyful.com - zwiki demos and other zwikis - http://joyfulsystems.blogspot.com - blog

1 2

ANN (Screencast): Step by step installation of a Zope and Plone site at WebFaction
by Remi Delon 31 Jul '06

31 Jul '06

Hello everyone, WebFaction have just released a screencast demo showing a step by step installation of a Zope and Plone site and product on their servers. The 10 minute screencast shows how to: - Create a Zope application using the control panel and mount it on some domains - Access the ZMI and create a Plone site - Use the VirtualHostMonster to run Plone at the root of the website - Add a new product and restart Zope - Run two websites from the same Zope instance The screencast is available at: http://blog.webfaction.com/zope-and-plone-screencast Remi. http://www.webfaction.com - Hosting for an agile web

1 0

TextIndexNG 3.1.12 released
by Andreas Jung 28 Jul '06

28 Jul '06

I am pleased to announce the release of TextIndexNG V 3.1.12 TextIndexNG V 3 is a complete new implementation based on Zope 3 technologies and can be used both in Zope 2.8+ or in Zope 3.2+ What's new? - multi-field indexing and query support - multi-lingual support - configurable converters (through ZCML) - new indexing API (allowing you to hook your custom content types with TextIndexNG through Zope 3 adapters). Changes in V 3.1.12: - fixed compatibility issue with Zope 2.9+ that caused a failure of the manage_workspace view within the ZMI Requirements: - Zope 2.8+, Zope 3.2+ Download: http://sf.net/projects/textindexng Project page: http://opensource.zopyx.biz/OpenSource/TextIndexNG3 TextIndexNG V 3 is published under the ZPL. Andreas Jung ----------------------------------------------------------------------- - Andreas Jung ZOPYX Ltd. & Co KG - - E-mail: info(a)zopyx.com Web: www.zopyx.com, www.zopyx.de - -----------------------------------------------------------------------

1 0

Lovely Zope 3 training Copenhagen
by Philipp von Weitershausen 26 Jul '06

26 Jul '06

Lovely Systems and Philipp von Weitershausen are happy to announce the arrangement of a "Lovely Zope 3 Training" on 3 thru 6 Oct 2006 in Copenhagen, Denmark. Aimed at the Python web developer, this 4-day training will cover every aspect of the Zope 3 application server you need to know for developing your own web apps. Philipp, a Zope 3 developer and author of the book "Web Component Development with Zope 3," will introduce you to Zope and its Component Architecture. You will learn everything from Zope's object database, the automatic form machinery, and its templating and skinning system to internationalizing and securing your web application, and much much more. For more information on the training location, the detailed training agenda and pricing, please refer to http://lovelysystems.com/training/lovely-zope-3-training-copenhagen. Sign up today! Looking forward to seeing you in Copenhagen, Philipp

1 0

[ANN] Zope 2.9.4 released
by Andreas Jung 20 Jul '06

20 Jul '06

Hi all, on behalf of Zope Corporation and the Zope community I am pleased to announce the release of Zope 2.9.4. This bugfix release corrects the information exposure vulnerability addressed in the "2007/07/05 Hotfix.", http://www.zope.org/Products/Zope/Hotfix-2006-07-05 You may remove that hotfix product from your instances after upgrading to this version of Zope. You can download it from http://www.zope.org/Products/Zope/2.9.4/ Some new features of Zope 2.9: - ZODB 3.6 - Five 1.3 - integration for Zope 3 events for object creation and deletion - Zope 3 i18n integration for page templates For more information on what is new in this release, see the CHANGES.txt files for the release: http://www.zope.org/Products/Zope/2.9.4/CHANGES.txt Please bring all the bugs you have found to the Zope bugtracker: "http://collector.zope.org/Zope":http://collector.zope.org/Zope For more information on the available Zope releases, guidance for selecting the right distribution and installation instructions, please see: http://www.plope.com/Books/2_7Edition/InstallingZope.stx Supported Python versions: Zope 2.9 requires Python 2.4.3 (Python 2.4.1, 2.4.2 are still acceptable). Older Python versions are no longer supported. -- Andreas Jung (andreas at zopyx dot com)

1 0

Announcing the release of Zope version 2.8.8
by Tres Seaver 14 Jul '06

14 Jul '06

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Zope 2.8.8 Released On behalf of Zope Corporation and the Zope community I am pleased to announce the release of Zope 2.8.8. You can download the sources from "http://www.zope.org/Products/Zope/2.8.8/", http://www.zope.org/Products/Zope/2.8.8 This bugfix release corrects the information exposure vulnerability addressed in the "2007/07/05 Hotfix.", http://www.zope.org/Products/Zope/Hotfix-2006-07-05 You may remove that hotvix product from your instances after upgrading to this version of Zope. New features of Zope 2.8.x - ZODB 3.4 with MVCC (multi version concurrency control) support. MVCC solves nearly every problem with ZODB read-conflict errors which is very important for high-traffic Zope sites. - Extension Classes were rewritten as Python new-style classes making all features of Python new-style classes available in Zope objects. This includes support for cyclic garbage collection. - Integration of Zope 3 technologies through Five (see http://codespeak.net/z3/five/) More Information For more information on what is new in this release, see the CHANGES.txt files for the release: "http://www.zope.org/Products/Zope/2.8.8/CHANGES.txt", http://www.zope.org/Products/Zope/2.8.8/CHANGES.txt See also: "http://www.zope.org/Wikis/DevSite/Projects/Zope2.8/OverView" http://www.zope.org/Wikis/DevSite/Projects/Zope2.8/OverView For more information on the available Zope releases, guidance for selecting the right distribution and installation instructions, please see: "http://www.plope.com/Books/2_7Edition/InstallingZope.stx", http://www.plope.com/Books/2_7Edition/InstallingZope.stx Reporting Bugs Please report all the bugs you have found to the Zope bugtracker: "http://collector.zope.org/Zope", http://collector.zope.org/Zope Supported Python versions At this time the only **supported** and **recommended** Python versions are 2.3.4 and 2.3.5. Using Python 2.4.X is **not supported** and **not recommended** at this time. Python 2.4.X will be supported when a security audit takes place. This means that you are using Python 2.4 + Zope 2.8 at **your own risk**. This warning also applies to binary packages that install Zope packages together with a system wide Python 2.4 installation (e.g. Fedora, SuSE...). Such installations are in general not supported. In addition there some third-party products and Python packages that don't work with Python 2.4 and can cause trouble when using Python 2.4. Tres. - -- =================================================================== Tres Seaver +1 202-558-7113 tseaver(a)palladion.com Palladion Software "Excellence by Design" http://palladion.com -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.2.2 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFEuB6X+gerLs4ltQ4RAofcAJ9lX+PxqXvlOv8Dl8tnxq2H/NLACwCfW5zN h2S/BSncs4Vb3BNBVeydsv0= =uDd5 -----END PGP SIGNATURE-----

1 0

Fredericksburg, VA ZPUG July 12: Jim Fulton's buildout package, Python + Fortran, roundtable
by Gary Poster 12 Jul '06

12 Jul '06

(Apologies for the especially late notice; for some reason these announcements did not go out when I sent them Monday to python- announce-list and zope-announce) Please join us Wed., July 12, 7:30-9:00 PM, for another meeting of the Fredericksburg, VA Zope and Python User Group ("ZPUG"). We will have a presentation, a lightning talk, a roundtable, and some good snacks. - Jim Fulton will present the talk he gave last week at EuroPython on zc.buildout. The zc.buildout project provides support for creating applications, especially Python applications. It provides tools for assembling applications from multiple parts, Python or otherwise. See http://svn.zope.org/zc.buildout/trunk/. - John Kimball will present a lightning talk of Fortran in Python. - We will have a roundtable discussion of Python and Zope topics. Gary ---------------------------------------- General ZPUG information When: second Wednesday of every month, 7:30-9:00. Where: Zope Corporation offices. 513 Prince Edward Street; Fredericksburg, VA 22408 (tinyurl for map is http://tinyurl.com/duoab) Parking: Zope Corporation parking lot; entrance on Prince Edward Street. Topics: As desired (and offered) by participants, within the constraints of having to do with Python or Zope. Mailing list: fredericksburg-zpug(a)zope.org Contact: Gary Poster (gary(a)zope.com)

1 0

Fredericksburg, VA ZPUG July 12: Jim Fulton's buildout package, Python + Fortran, roundtable
by Gary Poster 11 Jul '06

11 Jul '06

Please join us Wed., July 12, 7:30-9:00 PM, for another meeting of the Fredericksburg, VA Zope and Python User Group ("ZPUG"). We will have a presentation, a lightning talk, a roundtable, and some good snacks. - Jim Fulton will present the talk he gave last week at EuroPython on zc.buildout. The zc.buildout project provides support for creating applications, especially Python applications. It provides tools for assembling applications from multiple parts, Python or otherwise. See http://svn.zope.org/zc.buildout/trunk/. - John Kimball will present a lightning talk of Fortran in Python. - We will have a roundtable discussion of Python and Zope topics. Gary ---------------------------------------- General ZPUG information When: second Wednesday of every month, 7:30-9:00. Where: Zope Corporation offices. 513 Prince Edward Street; Fredericksburg, VA 22408 (tinyurl for map is http://tinyurl.com/duoab) Parking: Zope Corporation parking lot; entrance on Prince Edward Street. Topics: As desired (and offered) by participants, within the constraints of having to do with Python or Zope. Mailing list: fredericksburg-zpug(a)zope.org Contact: Gary Poster (gary(a)zope.com)

1 0

ANN: eGenix mxODBC Zope Database Adapter 1.0.10
by M.-A. Lemburg 10 Jul '06

10 Jul '06

________________________________________________________________________ ANNOUNCEMENT EGENIX.COM mxODBC Zope Database Adapter Version 1.0.10 Usable with Zope and the Plone CMS. Available for Zope 2.3 through 2.10 on Windows, Linux, Mac OS X, Solaris and FreeBSD ________________________________________________________________________ INTRODUCTION The eGenix mxODBC Zope Database Adapter allows you to easily connect your Zope or Plone installation to just about any database backend on the market today, giving you the reliability of the commercially supported eGenix product mxODBC and the flexibility of the ODBC standard as middle-tier architecture. The mxODBC Zope Database Adapter is highly portable, just like Zope itself and provides a high performance interface to all your ODBC data sources, using a single well-supported interface on Windows, Linux, Mac OS X, Solaris and FreeBSD. This makes it ideal for deployment in ZEO Clusters and Zope hosting environments where stability and high performance are a top priority, establishing an excellent basis and scalable solution for your Plone CMS. ________________________________________________________________________ NEWS We are pleased to announce a new version of our mxODBC Zope DA product. The Zope DA now fully supports 64-bit ODBC. A problem with 64-bit integers has been resolved in this release. Also new in this release is support for the upcoming Zope 2.10. We have successfully tested the mxODBC Zope DA with the latest beta of the upcoming Zope version. ________________________________________________________________________ UPGRADING If you have already bought mxODBC Zope DA 1.0.x licenses, you can use these license for the 1.0.10 version as well. There is no need to buy new licenses. The same is true for evaluation license users. ________________________________________________________________________ MORE INFORMATION For more information on the mxODBC Zope Database Adapter, licensing and download instructions, please visit our web-site: http://zope.egenix.com/ You can buy mxODBC Zope DA licenses online from the eGenix.com shop at: http://shop.egenix.com/ ________________________________________________________________________ Thank you, -- Marc-Andre Lemburg eGenix.com Professional Python Services directly from the Source (#1, Jul 10 2006) >>> Python/Zope Consulting and Support ... http://www.egenix.com/ >>> mxODBC.Zope.Database.Adapter ... http://zope.egenix.com/ >>> mxODBC, mxDateTime, mxTextTools ... http://python.egenix.com/ ________________________________________________________________________ ::: Try mxODBC.Zope.DA for Windows,Linux,Solaris,FreeBSD for free ! ::::

1 0

Security alert: use of Through-the-Web reStructuredText
by Jim Fulton 08 Jul '06

08 Jul '06

Recently, a serious security flaw was found in Zope 2 due to it's improper support for allowing reStructuredText to be edited through- the-web. reStructuredText has directives that allow inclusion of any file a Zope process could read and inclusion of data obtained from fetching arbitrary URLs. In a trusted environment, these directives have legitimate uses. The feature of including files and URL results should not be enabled for text entered from untrusted sources, which applies to most through-the-web interactions. The recent hotfix: http://www.zope.org/Products/Zope/Hotfix-2006-07-05/Hotfix-2006-07-05 addresses the problem for Zope 2. It is safe to allow reStructuredText through the web with care. The inclusion of files or URL results can be disabled, but the programmer must explicitly disable the feature. It is not disabled by default. It is also critical that a developer who exposes through-the-web reStructuredText have tests to verify that the file/url inclusion feature has been disabled. Zope 3 itself, as released, doesn't have this problem because it doesn't allow reST entry through the web. There are third-party applications, however, including 2 packages in the Zope 3 subversion tree that do have this problem. I strongly urge you to avoid using any Zope package that allows through-the-web input of reStructuredText unless you can verify that file/url has been properly disabled. The zwiki and bugtracker packages do not currently disable file/url inclusion and should not be used in situations in which users who are not highly trusted have access to these applications. If you are using a Zope 3 checkout, these packages are currently included and enabled. I plan to remove these packages from the Zope 3 repository tree within the next few hours. If you are using a checkout-based Zope 3 installation that exposes these packages to untrusted users, you are strongly urged to disable these packages by removing the following files from your package-includes directory: zwiki-configure.zcml bugtracker-configure.zcml Removing these files will also avoid problems when you update your checkout later, as these will refer to non-existent packages. Jim -- Jim Fulton mailto:jim@zope.com Python Powered! CTO (540) 361-1714 http://www.python.org Zope Corporation http://www.zope.com http://www.zope.org

1 0