-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 In order to address a potential cross-site scripting problem in Zope's fallback error message, we are releasing new versions of the 2.8, 2.9, 2.10, 2.11, and 2.12 release lines. The issue, reported by the Plone team, could be triggered by a combination of a broken 'standard_error_message' template, plus an error whose 'str' contained markup. Although the 2.8, 2.9, and 2.10 branches are formally "out-of- maintenance", they are still in very wide use. the Zope security response team decided to release versions for those branches, in addition to the 2.11 and 2.12 branches which are still being supported under normal policy. Releases are available here: - - "Zope 2.8.12", http://www.zope.org/Products/Zope/2.8.12 - - "Zope 2.9.12", http://www.zope.org/Products/Zope/2.9.12 - - "Zope 2.10.11", http://www.zope.org/Products/Zope/2.10.22 - - "Zope 2.11.6", http://www.zope.org/Products/Zope/2.11.6 - - "Zope 2.12.3", http://pypi.zope.org/pypi/Zope2/2.12.3 Please note that the 2.12 releases are made only on the Python Package Index server, aka "PyPI" or "the Cheeseshop." Tres. - -- =================================================================== Tres Seaver +1 540-429-0999 tseaver@palladion.com Palladion Software "Excellence by Design" http://palladion.com -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iEYEARECAAYFAktNPJYACgkQ+gerLs4ltQ6P1QCeJk6B+kIz9tXmN2oGYxFh1HuT WTIAoKevoMU9XOLmTJgpiRuLk7dHZnZv =PrpY -----END PGP SIGNATURE-----
Am 13.01.2010, 04:23 Uhr, schrieb Tres Seaver <tseaver@palladion.com>:
- - "Zope 2.12.3", http://pypi.zope.org/pypi/Zope2/2.12.3 Please note that the 2.12 releases are made only on the Python Package Index server, aka "PyPI" or "the Cheeseshop."
Thanks Tres, some components require compiling or binary eggs on Windows, ie. zope.container > 3.10 for Python 2.6. Is there an easy way of checking for such eggs? Charlie -- Charlie Clark Managing Director Clark Consulting & Research German Office Helmholtzstr. 20 Düsseldorf D- 40215 Tel: +49-211-600-3657 Mobile: +49-178-782-6226
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Charlie Clark wrote:
Am 13.01.2010, 04:23 Uhr, schrieb Tres Seaver <tseaver@palladion.com>:
- - "Zope 2.12.3", http://pypi.zope.org/pypi/Zope2/2.12.3 Please note that the 2.12 releases are made only on the Python Package Index server, aka "PyPI" or "the Cheeseshop."
Thanks Tres,
some components require compiling or binary eggs on Windows, ie. zope.container > 3.10 for Python 2.6. Is there an easy way of checking for such eggs?
There is the zope2kgs that I wrote for generating the download index (by accessing PyPI through its XMRPC). It should be easy to extend the package by checking the existence of Windows related packages (you should have to get hold of the files list through XMLRPC and check for something like *win* within the list of package files). Andreas -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAktN4ygACgkQCJIWIbr9KYzrMACg3fkgmc1HbJ15ux/niblrJmEv HRkAoOn9VhQWQDoQb8zG03PoDeMjjS1w =+/yq -----END PGP SIGNATURE-----
Am 13.01.2010, 16:13 Uhr, schrieb Andreas Jung <lists@zopyx.com>:
There is the zope2kgs that I wrote for generating the download index (by accessing PyPI through its XMRPC). It should be easy to extend the package by checking the existence of Windows related packages (you should have to get hold of the files list through XMLRPC and check for something like *win* within the list of package files).
Hi Andreas, probably overkill for this current project thanks to virtualisation but definitely something that should be worked on. As would, of course, buildots that could do something with the resulting information! Charlie -- Charlie Clark Managing Director Clark Consulting & Research German Office Helmholtzstr. 20 Düsseldorf D- 40215 Tel: +49-211-600-3657 Mobile: +49-178-782-6226
Am 13.01.2010, 16:58 Uhr, schrieb Charlie Clark <charlie.clark@clark-consulting.eu>:
probably overkill for this current project thanks to virtualisation but definitely something that should be worked on. As would, of course, buildots that could do something with the resulting information!
Installing Visual Studio Express makes this a whole lot easier. I can provide py2.6-win32 eggs for the following: acquisition-2.12.4-py2.6-win32.egg extensionclass-2.11.3-py2.6-win32.egg persistence-2.11.1-py2.6-win32.egg zodb3-3.9.4-py2.6-win32.egg zope2-2.12.3-py2.6-win32.egg zope.container-3.11.0-py2.6-win32.egg zope.i18nmessageid-3.5.0-py2.6-win32.egg zope.interface-3.5.3-py2.6-win32.egg zope.proxy-3.5.0-py2.6-win32.egg zope.security-3.7.2-py2.6-win32.egg Would this be of any use? Charlie -- Charlie Clark Managing Director Clark Consulting & Research German Office Helmholtzstr. 20 Düsseldorf D- 40215 Tel: +49-211-600-3657 Mobile: +49-178-782-6226
On Thu, Jan 14, 2010 at 4:53 PM, Charlie Clark <charlie.clark@clark-consulting.eu> wrote:
Am 13.01.2010, 16:58 Uhr, schrieb Charlie Clark <charlie.clark@clark-consulting.eu>: Installing Visual Studio Express makes this a whole lot easier. I can provide py2.6-win32 eggs for the following:
Most of these already exist on PyPi, except two:
zope2-2.12.3-py2.6-win32.egg
I meant to upload a new egg for that myself, but got into problems with my new build box and pywin32. I have a cross compilation setup for 32/64 bit now and uploaded win-amd64 versions of all other distributions including C extensions. Except building pywin32 yourself isn't quite as easy :) If you'd sent my your binary egg, I'll add it to PyPi.
zope.container-3.11.0-py2.6-win32.egg
Why are you trying to use that version? Zope 2.12.3 includes zope.container 3.8.2 as defined at http://download.zope.org/Zope2/index/2.12.3/. For that version binary eggs exist. Looking at the changelog of zope.container, it's not save to use a newer version of it. The ISite change in its 3.10.0 looks like it requires zope.component 3.8.0, but our KGS has 3.7.0. I'd highly discourage using arbitrary version mixes of Zope packages. Hanno
Am 14.01.2010, 17:12 Uhr, schrieb Hanno Schlichting <hanno@hannosch.eu>:
I meant to upload a new egg for that myself, but got into problems with my new build box and pywin32. I have a cross compilation setup for 32/64 bit now and uploaded win-amd64 versions of all other distributions including C extensions. Except building pywin32 yourself isn't quite as easy If you'd sent my your binary egg, I'll add it to PyPi.
On its way.
zope.container-3.11.0-py2.6-win32.egg Why are you trying to use that version? Zope 2.12.3 includes zope.container 3.8.2 as defined at http://download.zope.org/Zope2/index/2.12.3/. For that version binary eggs exist.
At the risk of looking even more foolish than usual, I didn't specify that version, it's what you get unless you specify otherwise. I think it's true for a whole load of components such as zope.formlib. Charlie -- Charlie Clark Managing Director Clark Consulting & Research German Office Helmholtzstr. 20 Düsseldorf D- 40215 Tel: +49-211-600-3657 Mobile: +49-178-782-6226
On Thu, Jan 14, 2010 at 5:43 PM, Charlie Clark <charlie.clark@clark-consulting.eu> wrote:
Am 14.01.2010, 17:12 Uhr, schrieb Hanno Schlichting <hanno@hannosch.eu>:
Why are you trying to use that version? Zope 2.12.3 includes zope.container 3.8.2 as defined at http://download.zope.org/Zope2/index/2.12.3/. For that version binary eggs exist.
At the risk of looking even more foolish than usual, I didn't specify that version, it's what you get unless you specify otherwise. I think it's true for a whole load of components such as zope.formlib.
If you don't specify either an index to be used for easy_install or extend the versions.cfg from the above url, you get an undefined package soup of everything latest. Except for rare moments that is never going to give you a usable set of packages. Did you follow the instructions at http://docs.zope.org/zope2/releases/2.12/INSTALL.html? If you use buildout, extending from the SVN tag or the index is the same. But you need one of those two: [buildout] extends = http://svn.zope.org/*checkout*/Zope/tags/2.12.3/versions.cfg ... [buildout] extends = http://download.zope.org/Zope2/index/2.12.3/versions.cfg ... Hanno
Am 14.01.2010, 18:28 Uhr, schrieb Hanno Schlichting <hanno@hannosch.eu>:
If you don't specify either an index to be used for easy_install or extend the versions.cfg from the above url, you get an undefined package soup of everything latest. Except for rare moments that is never going to give you a usable set of packages. Did you follow the instructions at http://docs.zope.org/zope2/releases/2.12/INSTALL.html? If you use buildout, extending from the SVN tag or the index is the same. But you need one of those two: [buildout] extends = http://svn.zope.org/*checkout*/Zope/tags/2.12.3/versions.cfg ... [buildout] extends = http://download.zope.org/Zope2/index/2.12.3/versions.cfg
Hi Hanno, thanks for pointing that out to me. I'd thought I was okay simply pegging my configuration to Zope2 = 2.12.3. Obviously, it isn't. Still I hope there is value in providing binary windows eggs for packages as and when they get updated. I'm still getting used to buildout and the possibility of running a more aggressive configuration on my development system than on deployment. But it is a bit of the blind leading the blind and this one's wearing an eye-patch! ;-) Charlie -- Charlie Clark Managing Director Clark Consulting & Research German Office Helmholtzstr. 20 Düsseldorf D- 40215 Tel: +49-211-600-3657 Mobile: +49-178-782-6226
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Charlie Clark wrote:
Am 14.01.2010, 17:12 Uhr, schrieb Hanno Schlichting <hanno@hannosch.eu>:
I meant to upload a new egg for that myself, but got into problems with my new build box and pywin32. I have a cross compilation setup for 32/64 bit now and uploaded win-amd64 versions of all other distributions including C extensions. Except building pywin32 yourself isn't quite as easy If you'd sent my your binary egg, I'll add it to PyPi.
On its way.
zope.container-3.11.0-py2.6-win32.egg Why are you trying to use that version? Zope 2.12.3 includes zope.container 3.8.2 as defined at http://download.zope.org/Zope2/index/2.12.3/. For that version binary eggs exist.
At the risk of looking even more foolish than usual, I didn't specify that version, it's what you get unless you specify otherwise. I think it's true for a whole load of components such as zope.formlib.
This is a (bad) consequence of not pinning versions in the setup.py of the Zope2 egg: you are going to get "latest" packages instead of the ones tracked by the KGS if you just 'easy_install Zope2'. Tres. - -- =================================================================== Tres Seaver +1 540-429-0999 tseaver@palladion.com Palladion Software "Excellence by Design" http://palladion.com -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iEYEARECAAYFAktPXzAACgkQ+gerLs4ltQ7L9QCg1I+rN41gn2mCBjEMOnh2I2ZZ YkMAoKIh/YuiAOauNuZJZ9Wd+lLvjeUp =lv93 -----END PGP SIGNATURE-----
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Tres Seaver wrote:
Charlie Clark wrote:
Am 14.01.2010, 17:12 Uhr, schrieb Hanno Schlichting <hanno@hannosch.eu>:
I meant to upload a new egg for that myself, but got into problems with my new build box and pywin32. I have a cross compilation setup for 32/64 bit now and uploaded win-amd64 versions of all other distributions including C extensions. Except building pywin32 yourself isn't quite as easy If you'd sent my your binary egg, I'll add it to PyPi. On its way.
zope.container-3.11.0-py2.6-win32.egg Why are you trying to use that version? Zope 2.12.3 includes zope.container 3.8.2 as defined at http://download.zope.org/Zope2/index/2.12.3/. For that version binary eggs exist. At the risk of looking even more foolish than usual, I didn't specify that version, it's what you get unless you specify otherwise. I think it's true for a whole load of components such as zope.formlib.
This is a (bad) consequence of not pinning versions in the setup.py of the Zope2 egg: you are going to get "latest" packages instead of the ones tracked by the KGS if you just 'easy_install Zope2'.
I should point out that, as the docs say, you should use the index maintained at: http://download.zope.org/Zope2/index/2.12.3/ e.g,:: $ bin/easy{_install -i http://download.zope.org/Zope2/index/2.12.3/ \ Zope2 Unlike installing fro PyPI, hat index is restricted to the set of packages in the corresponding Zope2 version's KGS. [1] http://docs.zope.org/zope2/releases/2.12/INSTALL.html#installing-zope-using-... Tres. - -- =================================================================== Tres Seaver +1 540-429-0999 tseaver@palladion.com Palladion Software "Excellence by Design" http://palladion.com -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iEYEARECAAYFAktPoAwACgkQ+gerLs4ltQ45MQCfXh3n6hr9YuIB3eEKN1bmhceK cdEAnj05A76yad9m8pK6jPHx47kUFTnG =nJZi -----END PGP SIGNATURE-----
participants (4)
-
Andreas Jung -
Charlie Clark -
Hanno Schlichting -
Tres Seaver