- Zope - Zope lists

Typo?
by Giampiero Benvenuti 25 Aug '22

25 Aug '22

Hi, in this page: https://zope.readthedocs.io/en/latest/changes.html Below the 5.4 release you can read "Add support for Python 3.10" in this page: https://zope.readthedocs.io/en/latest/news.html You can read "Added support for Python 3.9" The question is: does Zope 5.5.2 support Python 3.10 or not? Thank You, Giampiero

2 1

Zope 5.5.2 released
by Jens Vagelpohl 28 Jun '22

28 Jun '22

On behalf of Zope developer community I am pleased to announce the release of Zope 5.5.2. This bugfix release cleans up several smaller issues and will be the base for the first Plone 6 beta release. For the full list of changes see the change log at https://zope.readthedocs.io/en/latest/changes.html#id1. Installation instructions can be found at https://zope.readthedocs.io/en/latest/INSTALL.html. Jens Vagelpohl

1 0

Zope 4.8.2 released
by Jens Vagelpohl 01 Jun '22

01 Jun '22

On behalf of Zope developer community I am pleased to announce the release of Zope 4.8.2. This bugfix release squashes several smaller bugs, prevents errors when installing on Python 3.5 and 3.6 and fixes an issue with Scripts (Python) under Zope 2.7. For the full list of changes see the change logs at https://zope.readthedocs.io/en/4.x/changes.html#id1 Installation instructions can be found at https://zope.readthedocs.io/en/4.x/INSTALL.html. Reminder: Due to the unfixable security issue in the WSGI server component "waitress" on certain versions of Python we recommend that new installations use Zope 5 instead of Zope 4. Users migrating applications from Zope 2 should upgrade to Zope 5 once their application supports Zope 4 on Python 3. Detailed information about the waitress security issue is available at https://github.com/Pylons/waitress/security/advisories/GHSA-4f7p-27jc-3c36. Jens Vagelpohl

1 0

Zope 4.8.1 and 5.5.1 released
by Jens Vagelpohl 05 Apr '22

05 Apr '22

On behalf of Zope developer community I am pleased to announce the releases of Zope 4.8.1 and 5.5.1. These bugfix releases attempt to address an important security issue in the waitress WSGI server software that Zope uses as default WSGI server component. Unfortunately the fixed waitress version 2.1.1 has only been released for Python versions 3.7 and higher. Zope 4.8.1 and 5.5.1 now require the fixed waitress package IF it is running on Python 3.7 or higher. Previous Python versions do not have the security fix and we as Zope maintainers cannot provide a fixed waitress release for deployments on Python 2.7, 3.5 and 3.6. Even though Zope 4 still supports Python 2.7, 3.5 and 3.6 and Zope 5 still supports Python 3.6 we strongly advise you to either upgrade your Zope installation to at least Python 3.7, or switch to a different WSGI server. See https://zope.readthedocs.io/en/latest/operation.html#recommended-wsgi-serve… for some choices. For the full list of changes see the change logs at https://zope.readthedocs.io/en/4.x/changes.html#id1 and https://zope.readthedocs.io/en/latest/changes.html#id1. Installation instructions can be found at https://zope.readthedocs.io/en/4.x/INSTALL.html and https://zope.readthedocs.io/en/latest/INSTALL.html. Detailed information about the waitress security issue is available at https://github.com/Pylons/waitress/security/advisories/GHSA-4f7p-27jc-3c36. Jens Vagelpohl

1 0

Zope 4.8 and 5.5 released
by Jens Vagelpohl 10 Mar '22

10 Mar '22

On behalf of Zope developer community I am pleased to announce the releases of Zope 4.8 and 5.5. These releases add improved cookie handling (see https://github.com/zopefoundation/Zope/pull/1010) in addition to a few bug fixes. For the full list of changes see the change logs at https://zope.readthedocs.io/en/4.x/changes.html#id1 and https://zope.readthedocs.io/en/latest/changes.html#id1. Installation instructions can be found at https://zope.readthedocs.io/en/4.x/INSTALL.html and https://zope.readthedocs.io/en/latest/INSTALL.html. Jens Vagelpohl

1 0

Zope 4.7 and 5.4 released
by Jens Vagelpohl 09 Jan '22

09 Jan '22

On behalf of Zope developer community I am pleased to announce the releases of Zope 4.7 and 5.4. These bugfix releases solve a few issues with object creation via WebDAV and a few ZMI page issues. Zope 5.4 officially deprecates the PropertyManager property types ulines, utext, utoken and ustring and will show a warning in the ZMI when these are encountered. A function was added at ``ZPublisher.utils.fix_properties`` which will replace all these properties with their standard equivalents, see https://github.com/zopefoundation/Zope/pull/993 for a usage example. Due to ongoing domain ownership issues with the zope.org domain we are deprecating it in favor of the new domain zope.dev. All hosts and email addresses that used to live under zope.org are now reachable under zope.dev. These new Zope releases and the documentation at https://zope.readthedocs.io and https://www.zope.dev had all URLs and references updated to reflect this change. Finding and changing old references will take time, though. For the full list of changes see the change logs at https://zope.readthedocs.io/en/4.x/changes.html#id1 and https://zope.readthedocs.io/en/latest/changes.html#id1. Installation instructions can be found at https://zope.readthedocs.io/en/4.x/INSTALL.html and https://zope.readthedocs.io/en/latest/INSTALL.html. Jens Vagelpohl

1 0

Zope 5.3 and webdav
by Giampiero Benvenuti 29 Nov '21

29 Nov '21

Hello everyone, I was reading the zope.conf file of zope5.3 and it looks like webdav is supported. Does it need ZServer for that? I thoght ZServer wasnt supported any longer. Thanks for your tips. —giampiero

3 2

Zope 4.6.3 and 5.3 released with a security fix
by Jens Vagelpohl 31 Jul '21

31 Jul '21

On behalf of Zope developer community I am pleased to announce the releases of Zope 4.6.3 and 5.3. This bugfix release solves a few minor issues and contains a security fix. For the full list of changes see the change logs at https://zope.readthedocs.io/en/4.x/changes.html#id1 and https://zope.readthedocs.io/en/latest/changes.html#id1 Installation instructions can be found at https://zope.readthedocs.io/en/4.x/INSTALL.html and https://zope.readthedocs.io/en/latest/INSTALL.html. These releases contain a security fix that prevents remote code execution through Script (Python) objects. You are only at risk if all of the following are true: - You use Python 3 for your Zope deployment (Zope 4 on Python 2 is not affected) - You run Zope 4 below version 4.6.3 or Zope 5 below version 5.3 - You have installed the optional Products.PythonScripts add-on package - You allow untrusted non-admin users to add or edit Script (Python) objects By default, untrusted non-admin users cannot add or edit Script (Python) objects, only “Manager” users can. Enabling this level of access for untrusted users would be a very unusual configuration and it is highly unlikely any site administrator would do so to begin with. The related security advisories with full details are published here: - https://github.com/zopefoundation/Zope/security/advisories/GHSA-g4gq-j4p2-j… - https://github.com/zopefoundation/AccessControl/security/advisories/GHSA-qc… NOTE FOR PLONE USERS: Make sure to install the latest version of PloneHotfix20210518 first, which should appear shortly after this Zope release. See https://plone.org/security/hotfix/20210518. Don't install Zope 4.6.3 or 5.3 into an existing Plone setup without testing. The PloneHotfix packages ensures that the Zope changes don’t interfere with Plone add-ons. Jens Vagelpohl

1 0

A basic question I couldn't fine the answer on google
by Giampiero Benvenuti 19 Jul '21

19 Jul '21

Hi there, let’s say, I want to upgrade from zope5.1.2 to zope 5.2.1 Should I just replace the zope5.2.1 Data.fs with the zope5.1.2 one? Or, if this sound silly, how would you do it? Thank You, —giampiero

2 1

Zope 4.6.2 released
by Jens Vagelpohl 27 Jun '21

27 Jun '21

On behalf of Zope developer community I am pleased to announce the release of Zope 4.6.2. This bugfix release backports the stricter path expression traversal code from Zope 5. For the full list of changes see the change log at https://zope.readthedocs.io/en/4.x/changes.html#id1 Installation instructions can be found at https://zope.readthedocs.io/en/4.x/INSTALL.html NOTE FOR PLONE USERS: Make sure to install the latest version of PloneHotfix20210518 first, which should appear shortly after this Zope release. See https://plone.org/security/hotfix/20210518. Don't install Zope 4.6.2 into an existing Plone setup without testing. The traversal changes in Zope break some Plone add-ons that relied on the old traversal behavior. PloneHotfix20210518 ensures support for those Plone add-ons. Jens Vagelpohl

1 0