Zope February 2021

zope@zope.dev

1 participants
2 discussions

Two low-impact security issues in Products.PluggableAuthService
by Jens Vagelpohl 26 Feb '21

26 Feb '21

Hi all, Two low-impact security issues have been identified in Products.PluggableAuthService: - an information disclosure issue involving the ZODB Role Manager plugin. See https://github.com/zopefoundation/Products.PluggableAuthService/security/ad… for details. - an open redirect issue in the Cookie Auth Helper. See https://github.com/zopefoundation/Products.PluggableAuthService/security/ad… for details. Both issues are mitigated by updating to Products.PluggableAuthService version 2.6.1 or higher. The Plone release managers will apply this update with Plone bugfix releases they are planning to publish within the next few days. jens

1 0

Zope 4.5.4 and 5.1.1 released
by Jens Vagelpohl 10 Feb '21

10 Feb '21

On behalf of Zope developer community I am pleased to announce the releases of Zope 4.5.4 and 5.1.1. This bugfix release solves a few minor issues and updates the shipped versions of bootstrap, jQuery and Font Awesome to their latest releases. For the full list of changes see the change logs at https://zope.readthedocs.io/en/4.x/changes.html#id1 and https://zope.readthedocs.io/en/latest/changes.html#id1 Installation instructions can be found at https://zope.readthedocs.io/en/4.x/INSTALL.html and https://zope.readthedocs.io/en/latest/INSTALL.html. Jens Vagelpohl

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

2001

2000

1999

1998

1997

Zope February 2021