Re: [Zope-dev] Security announcement update
Laurence Rowe <[email protected]>
| Newsgroups | gmane.comp.web.zope.general,gmane.comp.web.zope.devel |
|---|---|
| Message-ID | <[email protected]> |
On 28 June 2011 14:40, Norbert Marrale <norbertmarrale-/[email protected]> wrote: > This should be clarified too: "You should, however, make sure that you > are running either Zope 2.10.13 or Zope 2.11.8 and PluggableAuthService > 1.5.5, 1.6.5 or 1.7.5 " > > Why must PluggableAuthService (+ its dependencies) even be installed? The Plone Hotfix for CVE-2011-0720 included patches to PluggableAuthService. If you use PluggableAuthService outside of Plone then you need to update to a release that includes that fix. If you don't run PluggableAuthService it is not required to install it. Laurence _______________________________________________ Zope maillist - [email protected] https://mail.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - https://mail.zope.org/mailman/listinfo/zope-announce https://mail.zope.org/mailman/listinfo/zope-dev )