Hi all - We recently made a Hotfix release to address an issue dealing with Zope APIs returning mutable objects that could be changed inappropriately from DTML (Hotfix_08_09_2000). After further investigation, there was another aspect to the problem that was not addressed in the recent hotfix. I've uploaded a new hotfix release (Hotfix_2000-08-17) that supercedes the one from the 9th and includes the extra fix required. http://www.zope.org/Products/Zope/Hotfix_2000-08-17/ If you run a Zope site and allow untrusted users to edit DTML on your site, you should install this updated hotfix. There is no need to uninstall the prior hotfix release. These fixes will also be in the 2.2.1 release, expected next week. Brian Lloyd brian@digicool.com Software Engineer 540.371.6909 Digital Creations http://www.digicool.com