On behalf of Zope developer community I am pleased to announce the release of Zope 6.2. This release turns off the rarely-used XML-RPC publishing functionality by default in order to remove the risk of abuse by malicious actors. If you really need XML-RPC, simply add "enable-xmlrpc on" to your Zope configuration to turn it back on. If you are still on Zope 5 we recommend adding "enable-xmlrpc off" to your Zope configuration to disable XML-RPC unless you really need it. Links to more information: - full change log: https://zope.readthedocs.io/en/latest/changes.html - installation instructions: https://zope.readthedocs.io/en/latest/INSTALL.html - documentation: https://zope.readthedocs.io/ - source code: https://github.com/zopefoundation/Zope - migration from Zope 5 to Zope 6: https://zope.readthedocs.io/en/latest/migrations/zope6.html Jens Vagelpohl
participants (1)
-
Jens Vagelpohl