[Zope] Zope and security vulnerability: 20121106

[Jens Vagelpohl]

On Nov 13, 2012, at 10:16 , Jürgen Herrmann <Juergen.Herrmann at XLhost.de> wrote:
> I successfully applied these hotfixes to Zope 2.13 versions
> without any problems. What puzzles me though is why was there
> no announcement for theses fixes here on zope ml? Or are these
> fixes not critical for pure Zope2 users? Or are these all fixed
> in the latest version of Zope2?

There was no announcement here because those patches were prepared by Plone developers without our knowledge and announced without our knowledge. The Zope developers know as much about these patches (meaning little to nothing) as any other Zope user.

jens


-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4322 bytes
Desc: not available
URL: <http://mail.zope.org/pipermail/zope/attachments/20121113/0db04ca4/attachment.p7s>