Zope May 2021

zope@zope.dev

3 participants
2 discussions

Zope 4.6 and 5.2 released with an important security fix
by Jens Vagelpohl 21 May '21

21 May '21

On behalf of Zope developer community I am pleased to announce the releases of Zope 4.6 and 5.2. This bugfix release solves a few minor issues and also contains an important security fix, see below. For the full list of changes see the change logs at https://zope.readthedocs.io/en/4.x/changes.html#id1 and https://zope.readthedocs.io/en/latest/changes.html#id1 Installation instructions can be found at https://zope.readthedocs.io/en/4.x/INSTALL.html and https://zope.readthedocs.io/en/latest/INSTALL.html. NOTE: These releases contain a security fix that prevents remote code execution through TAL expressions. You will only be at risk if you allow untrusted people to add or edit Zope Page Template objects. For more details, see the security advisory at https://github.com/zopefoundation/Zope/security/advisories/GHSA-5pr9-v234-j…. A CVE has been requested through GitHub. NOTE FOR PLONE USERS: Before installing Zope 4.6 or 5.2 make sure to install PloneHotfix20210518 first, see https://plone.org/security/hotfix/20210518. The security changes in Zope break some Plone add-ons that relied on the old insecure traversal behavior. PloneHotfix20210518 ensures support for those Plone add-ons. Jens Vagelpohl

2 3

Two or three things about Zope 5
by Giampiero Benvenuti 07 May '21

07 May '21

Hi there, first of all, I want to thanks all the people who works on the project “5”. Second, please bear with me while I try to communicate my failures with the "5”. I was able to install zope5.1.2 on my mac and also on opalstack.com with the help of Sean. It looks great! The Chameleon Editor works fine and so almost all the products I would need. So far, the only issues I have with it are the errors expressions and the Session Data Manager. 1. When in some script I do some typo like “reuest” instead or “request” I get the error “Internal Server Error The server encountered an unexpected internal server error (generated by waitress)” Question: can I have a better and less “minimalistic” error expressions, something more “friendly”? 2. Yeah! Session Data Manager: "Sessioning is currently disabled because the session data container path setting is invalid. Please enter the path to a valid session data container object.”. What can I do bout it? 3. Sorry, I forgot about this: zone time. In zope 2.xx I used to set the local/zone time in this way: in instance/bin/runzope: export TZ=Europe/Rome. How do I fix it in zope5? Thanks you all for your work and help, —giampiero

2 3

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

2001

2000

1999

1998

1997

Zope May 2021