Zope 4.8.1 and 5.5.1 released

--===============3382848987332883087==
Content-Type: multipart/signed;
	boundary="Apple-Mail=_4F75928C-F69A-4F73-9C32-92AE655EA9F3";
	protocol="application/pgp-signature";
	micalg=pgp-sha512


--Apple-Mail=_4F75928C-F69A-4F73-9C32-92AE655EA9F3
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=us-ascii

On behalf of Zope developer community I am pleased to announce the =
releases of Zope 4.8.1 and 5.5.1.

These bugfix releases attempt to address an important security issue in =
the waitress WSGI server software that Zope uses as default WSGI server =
component. Unfortunately the fixed waitress version 2.1.1 has only been =
released for Python versions 3.7 and higher.

Zope 4.8.1 and 5.5.1 now require the fixed waitress package IF it is =
running on Python 3.7 or higher. Previous Python versions do not have =
the security fix and we as Zope maintainers cannot provide a fixed =
waitress release for deployments on Python 2.7, 3.5 and 3.6.

Even though Zope 4 still supports Python 2.7, 3.5 and 3.6 and Zope 5 =
still supports Python 3.6 we strongly advise you to either upgrade your =
Zope installation to at least Python 3.7, or switch to a different WSGI =
server. See =
https://zope.readthedocs.io/en/latest/operation.html#recommended-wsgi-serv=
ers for some choices.

For the full list of changes see the change logs at =
https://zope.readthedocs.io/en/4.x/changes.html#id1 and =
https://zope.readthedocs.io/en/latest/changes.html#id1.

Installation instructions can be found at =
https://zope.readthedocs.io/en/4.x/INSTALL.html and =
https://zope.readthedocs.io/en/latest/INSTALL.html.

Detailed information about the waitress security issue is available at =
https://github.com/Pylons/waitress/security/advisories/GHSA-4f7p-27jc-3c36=
.


Jens Vagelpohl


--Apple-Mail=_4F75928C-F69A-4F73-9C32-92AE655EA9F3
Content-Transfer-Encoding: 7bit
Content-Disposition: attachment;
	filename=signature.asc
Content-Type: application/pgp-signature;
	name=signature.asc
Content-Description: Message signed with OpenPGP

-----BEGIN PGP SIGNATURE-----
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=s653
-----END PGP SIGNATURE-----

--Apple-Mail=_4F75928C-F69A-4F73-9C32-92AE655EA9F3--

--===============3382848987332883087==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Zope-Announce maillist  -  [email protected]
https://mail.zope.dev/mailman/listinfo/zope-announce

  Zope-Announce for Announcements only - no discussions

(Related lists -
 Users: https://mail.zope.dev/mailman/listinfo/zope
 Developers: https://mail.zope.dev/mailman/listinfo/zope-dev )

--===============3382848987332883087==--