Zope 4.6 and 5.2 released with an important security fix

--===============0383245644739409390==
Content-Type: multipart/signed;
	boundary="Apple-Mail=_C5ACD39F-14EE-4815-8D31-476E9E755020";
	protocol="application/pgp-signature";
	micalg=pgp-sha512


--Apple-Mail=_C5ACD39F-14EE-4815-8D31-476E9E755020
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=us-ascii

On behalf of Zope developer community I am pleased to announce the =
releases of Zope 4.6 and 5.2.

This bugfix release solves a few minor issues and also contains an =
important security fix, see below. For the full list of changes see the =
change logs at https://zope.readthedocs.io/en/4.x/changes.html#id1 and =
https://zope.readthedocs.io/en/latest/changes.html#id1

Installation instructions can be found at =
https://zope.readthedocs.io/en/4.x/INSTALL.html and =
https://zope.readthedocs.io/en/latest/INSTALL.html.

NOTE: These releases contain a security fix that prevents remote code =
execution through TAL expressions. You will only be at risk if you allow =
untrusted people to add or edit Zope Page Template objects. For more =
details, see the security advisory at =
https://github.com/zopefoundation/Zope/security/advisories/GHSA-5pr9-v234-=
jw36. A CVE has been requested through GitHub.

NOTE FOR PLONE USERS: Before installing Zope 4.6 or 5.2 make sure to =
install PloneHotfix20210518 first, see =
https://plone.org/security/hotfix/20210518. The security changes in Zope =
break some Plone add-ons that relied on the old insecure traversal =
behavior. PloneHotfix20210518 ensures support for those Plone add-ons.

Jens Vagelpohl

--Apple-Mail=_C5ACD39F-14EE-4815-8D31-476E9E755020
Content-Transfer-Encoding: 7bit
Content-Disposition: attachment;
	filename=signature.asc
Content-Type: application/pgp-signature;
	name=signature.asc
Content-Description: Message signed with OpenPGP

-----BEGIN PGP SIGNATURE-----
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=IrDA
-----END PGP SIGNATURE-----

--Apple-Mail=_C5ACD39F-14EE-4815-8D31-476E9E755020--

--===============0383245644739409390==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Zope-Announce maillist  -  [email protected]
https://mail.zope.org/mailman/listinfo/zope-announce

  Zope-Announce for Announcements only - no discussions

(Related lists -
 Users: https://mail.zope.org/mailman/listinfo/zope
 Developers: https://mail.zope.org/mailman/listinfo/zope-dev )

--===============0383245644739409390==--