[Zope-CMF] Re: CMF Tests: 12 OK, 1 Failed
Jens Vagelpohl
jens at dataflake.org
Tue Oct 24 09:11:39 EDT 2006
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
> Tres, I am afraid you seem to be the only one able to verify this.
> IIRC the security fix is yours as - of course - is CMF. ;-)
The CMF is not tied to one person. No one has "responsibility for all
eternity" to fix it, even for no-longer-maintained versions.
> I am ready to remove irrelevant combinations, but in this case I
> have been reluctant up to now because of the possible security
> implications.
CMF 1.4 is unmaintained. This has been known for a long time. Plone,
as the largest "customer", prescribes specific Zope and CMF versions,
which obviously have been tested ad infinitum. I don't see the value
for continuing to automatically test combinations that are not used.
jens
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (Darwin)
iD8DBQFFPhEMRAx5nvEhZLIRAgIoAJ4/UUgy/OIDoKiqb8vVhlAWQgWIsgCgidrg
lT6hgw8C8TepZE/1yhwcnqc=
=Xh5G
-----END PGP SIGNATURE-----
More information about the Zope-CMF
mailing list