- Zope-Announce - Zope lists

[Security issue] SQL injection in DTML or in connection objects
by Michael Howitz 12 Feb '20

12 Feb '20

On behalf of the Plone security team I am announcing this security issue in Zope also here: CVE Identifier: CVE-2020-7939 Type: SQL injection Severity: 4.9 – MEDIUM Affected Zope versions: * Zope 2 older than 2.13.30 (2.13.30 is not yet released) * Zope 4 older than 4.2 For details see https://plone.org/security/hotfix/20200121/sql-injection-in-dtml-or-in-conn… To fix the issue use the Hotfix provided at https://plone.org/security/hotfix/20200121 (version 1.1 or newer) or upgrade to Zope 4.2+. There is no released Zope 2.13 version, yet, which includes the fix. (I hope it will can released soon.) -- Mit freundlichen Grüßen Michael Howitz

1 0

Announcement: Zope 4.1.2 released
by Michael Howitz 04 Sep '19

04 Sep '19

On behalf of Zope developer community I am pleased to announce the release of Zope 4.1.2. This release is the last one before opening the master branch for Zope 5 development. (Zope 5 means dropping Python 2.7 support, thus only supporting Python 3.) The 4.1.2 release contains only a few changes like: * resurrect the ZMI History tab and functionality For details of the changes see https://zope.readthedocs.io/en/latest/changes.html#id1 To install the new version see https://zope.readthedocs.io/en/latest/INSTALL.html -- Mit freundlichen Grüßen Michael Howitz

1 0

Announcement: Zope 4.1 released
by Michael Howitz 19 Jun '19

19 Jun '19

On behalf of Zope developer community I am pleased to announce the release of Zope 4.1. It is a combined release containing features and bug fixes, such as: * bring back ZODB packing to the ZMI * optionally control the use of Zope’s built-in XML-RPC support for POST requests with Content-Type text/xml via the registration of a ZPublisher.interfaces.IXmlrpcChecker utility * `allowed_attributes` and `allowed_interface` work again for BrowserViews. * fix missing Paste distribution on installation using pip * prevent encoding issues in existing DTML Method and DTML Document objects. * update and fix the documentation * many bug fixes. For details of the changes see https://zope.readthedocs.io/en/latest/changes.html#id1 To install the new version see https://zope.readthedocs.io/en/latest/INSTALL.html -- Mit freundlichen Grüßen Michael Howitz

1 0

Announcement: Zope 4.0-final released
by Michael Howitz 10 May '19

10 May '19

On behalf of Zope developer community I am happy to announce the final release of Zope 4. This release contains: * no breaking changes since 4.0b10 * some features (e. g. the resurrection of the ZMI interfaces tab) and * many bug fixes. * the happiness of being final now For details of the changes see https://zope.readthedocs.io/en/latest/changes.html#id1 Thank you everyone who helped to bring Zope such a long way behind the border into the Python 3 wonderland. See https://blog.gocept.com/2019/05/10/celebration-zope-4-final-release/ for some more details. To install the new version see the instructions for either zc.buildout: http://zope.readthedocs.io/en/latest/INSTALL-buildout.html or virtualenv/pip: http://zope.readthedocs.io/en/latest/INSTALL-virtualenv.html or pipenv: https://zope.readthedocs.io/en/latest/INSTALL-pipenv.html -- Mit freundlichen Grüßen Michael Howitz

1 0

Announcement: Zope 4.0b10 released
by Michael Howitz 08 Mar '19

08 Mar '19

On behalf of Zope developer community I am pleased to announce the release of Zope 4.0b10. This release contains: * no breaking changes * some features (e. g. supporting standard_error_message again) and * many bug fixes. For details of the changes see https://github.com/zopefoundation/Zope/blob/master/CHANGES.rst#40b10-2019-0… To install the new version see the instructions for either zc.buildout: http://zope.readthedocs.io/en/latest/INSTALL-buildout.html or virtualenv/pip: http://zope.readthedocs.io/en/latest/INSTALL-virtualenv.html or pipenv: https://zope.readthedocs.io/en/latest/INSTALL-pipenv.html -- Mit freundlichen Grüßen Michael Howitz

1 0

Announcement: Zope2 2.13.29 released
by Michael Howitz 09 Feb '19

09 Feb '19

On behalf of Zope developer community I am pleased to announce the release of Zope2 2.13.29. This release contains a security related fix and two new features. Additionally it drops support for Python 2.6. This means it is no longer tested from now on. See details at https://github.com/zopefoundation/Zope/blob/2.13/doc/CHANGES.rst#21329-2019… To install the new version see the instructions for either zc.buildout: https://zope.readthedocs.io/en/2.13/INSTALL-buildout.html or virtualenv: https://zope.readthedocs.io/en/2.13/INSTALL-virtualenv.html -- Mit herzlichen Grüßen Michael Howitz

1 0

Announcement: Zope 4.0b9 released
by Michael Howitz 09 Feb '19

09 Feb '19

On behalf of Zope developer community I am pleased to announce the release of Zope 4.0b9. This release contains two breaking changes: * Remove support for `management_page_charset` * Remove support for Bobo Call Interface It adds preliminary support for Python 3.8. as of 3.8.0a1 is now released. Additionally some bugs regarding ZMI, umlauts in URLs etc. were fixed. For details of the changes see https://github.com/zopefoundation/Zope/blob/master/CHANGES.rst#40b9-2019-02… To install the new version see the instructions for either zc.buildout: http://zope.readthedocs.io/en/latest/INSTALL-buildout.html or virtualenv/pip: http://zope.readthedocs.io/en/latest/INSTALL-virtualenv.html or pipenv: https://zope.readthedocs.io/en/latest/INSTALL-pipenv.html -- Mit freundlichen Grüßen Michael Howitz

1 0

Announcement: Zope 4.0b8 released
by Michael Howitz 14 Dec '18

14 Dec '18

On behalf of Zope developer community I am pleased to announce the release of Zope 4.0b8. This release contains some new features, e. g. IPv6 support for the VirtualHostMonster, and bug fixes, e. g. the handling of ConflictErrors. For details of the changes see https://zope.readthedocs.io/en/latest/changes.html#b8-2018-12-14 To install the new version see the instructions for either zc.buildout: http://zope.readthedocs.io/en/latest/INSTALL-buildout.html or virtualenv/pip: http://zope.readthedocs.io/en/latest/INSTALL-virtualenv.html or pipenv: https://zope.readthedocs.io/en/latest/INSTALL-pipenv.html -- Mit freundlichen Grüßen Michael Howitz

1 0

Announcement: Zope 4.0b7 released
by Michael Howitz 30 Oct '18

30 Oct '18

On behalf of Zope developer community I am pleased to announce the release of Zope 4.0b7. This release contains bug fixes for the changes in the previous release and aims to ease the update to a newer version of the `persistent` package. For details of the bugfixes see https://zope.readthedocs.io/en/latest/changes.html#b7-2018-10-30 To install the new version see the instructions for either zc.buildout: http://zope.readthedocs.io/en/latest/INSTALL-buildout.html or virtualenv/pip: http://zope.readthedocs.io/en/latest/INSTALL-virtualenv.html or pipenv: https://zope.readthedocs.io/en/latest/INSTALL-pipenv.html -- Mit freundlichen Grüßen Michael Howitz

1 0

Announcement: Zope 4.0b6 released
by Michael Howitz 11 Oct '18

11 Oct '18

On behalf of Zope developer community I am pleased to announce the release of Zope 4.0b6. This release has a slightly changed installation procedure when using zc.buildout, as bootstrap.py is no longer used. It contains some new features, e.g.: * the ZMI is now styled via Bootstrap * Python 3.7 is officially supported * XML-RPC is supported again and works with the WSGI publisher (it was dropped in 4.0a2) * Zope can now be installed via pipenv Details of the new features and additional bugfixes see https://zope.readthedocs.io/en/latest/changes.html#b6-2018-10-11 To install the new version see the instructions for either zc.buildout: http://zope.readthedocs.io/en/latest/INSTALL-buildout.html or virtualenv/pip: http://zope.readthedocs.io/en/latest/INSTALL-virtualenv.html or pipenv: https://zope.readthedocs.io/en/latest/INSTALL-pipenv.html -- Mit freundlichen Grüßen Michael Howitz

1 0