[Zope-CMF] changing password broken

[Tom Hoffman]

I just updated from Zope2.3.2/CMF 1.1 to Zope 2.4.1/CMF CVS, and on the whole 
it went smoothly.  One problem which has cropped up is that when a user tries 
to change his or her password in CMF preferences, they get this error:

Error Type: NameError
 Error Value: global name 'has' is not defined
 
and the traceback:

 File /usr/local/zope/2.4.1/lib/python/ZPublisher/Publish.py, line 223, in 
publish_module
  File /usr/local/zope/2.4.1/lib/python/ZPublisher/Publish.py, line 187, in 
publish
  File /usr/local/zope/2.4.1/lib/python/Zope/__init__.py, line 226, in 
zpublisher_exception_hook
    (Object: LockableItem)
  File /usr/local/zope/2.4.1/lib/python/ZPublisher/Publish.py, line 171, in 
publish
  File /usr/local/zope/2.4.1/lib/python/ZPublisher/mapply.py, line 160, in 
mapply
    (Object: change_password)
  File /usr/local/zope/2.4.1/lib/python/ZPublisher/Publish.py, line 112, in 
call_object
    (Object: change_password)
  File /usr/local/zope/2.4.1/lib/python/Shared/DC/Scripts/Bindings.py, line 
324, in __call__
    (Object: change_password)
  File /usr/local/zope/2.4.1/lib/python/Shared/DC/Scripts/Bindings.py, line 
354, in _bindAndExec
    (Object: change_password)
  File /usr/local/zope/2.4.1/lib/python/Products/CMFCore/FSPythonScript.py, 
line 187, in _exec
    (Object: change_password)
    (Info: ({'script': <FSPythonScript instance at 8acb520>, 'context': 
<CMFSite instance at 8c7e8e8>, 'container': <CMFSite instance at 8c7e8e8>, 
'traverse_subpath': []}, ('Jarabeck', 'Jarabeck', []), {}, (None,)))
  File Script (Python), line 9, in change_password
  File /usr/local/zope/2.4.1/lib/python/Products/CMFCore/MembershipTool.py, 
line 355, in credentialsChanged
    (Object: portal_membership)
  File /usr/local/zope/2.4.1/lib/python/OFS/Traversable.py, line 233, in 
restrictedTraverse
    (Object: portal_membership)
  File /usr/local/zope/2.4.1/lib/python/OFS/Traversable.py, line 193, in 
unrestrictedTraverse
    (Object: ApplicationDefaultPermissions)
NameError: (see above)

Any ideas?
Thanks!
--Tom