Re: Zope and security vulnerability: 20121106
Richard Harley <[email protected]>
| Newsgroups | gmane.comp.web.zope.general |
|---|---|
| Organization | ScholarPack |
| Message-ID | <[email protected]> |
So, to clarify, does this affect plain Zope 2.10, no Plone? Rich On 12/11/12 12:02, johannes raggam wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > The affected versions go back a long time. I don't know it exactly, > but people have used it successfully with Plone 2.1 (from ancient > times) and I have patched Zope 2.8 instances too. > > > On 11/11/2012 09:43 PM, Allen Schmidt wrote: >> For which zope versions? >> >> On Nov 11, 2012 2:16 PM, "johannes raggam"<[email protected] >> <mailto:[email protected]>> wrote: >> >> You can just apply the Plone hotfix for Zope only installations. >> The Plone patches are not applied then. >> >> Johannes >> >> On 11/11/2012 06:32 PM, Marcus Schopen wrote: >>> Hi, >>> is a standard Zope affected by this security vulnerability or >>> only if Plone is installed: >> >> http://plone.org/products/plone/security/advisories/20121106-announcement >> >> >>> The patch is replacing some basic classes therefore it looks to >>> me that Zope itself without any Plone is vulnerable too. If so >>> is there a Hotfix for Zope or new Zope version which fixes these >>> bugs? >>> Ciao Marcus >> >>> _______________________________________________ Zope maillist - >>> [email protected]<mailto:[email protected]> >> https://mail.zope.org/mailman/listinfo/zope ** No >>> cross posts or HTML encoding! ** (Related lists - >>> https://mail.zope.org/mailman/listinfo/zope-announce >>> https://mail.zope.org/mailman/listinfo/zope-dev ) >> >> >> _______________________________________________ Zope maillist - >> [email protected]<mailto:[email protected]> >> https://mail.zope.org/mailman/listinfo/zope ** No cross posts or >> HTML encoding! ** (Related lists - >> https://mail.zope.org/mailman/listinfo/zope-announce >> https://mail.zope.org/mailman/listinfo/zope-dev ) >> > - -- > programmatic web development > di(fh) johannes raggam / thet > python plone zope development > mail: office-//[email protected] > web: http://programmatic.pro > http://bluedynamics.com > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v1.4.11 (GNU/Linux) > Comment: Using GnuPG with Mozilla - http://www.enigmail.net/ > > iEYEARECAAYFAlCg5WkACgkQW4mNMQxDgAfsyACgvbuoNO8ocpordzJmbH3X0OA2 > gCsAnAkFNozMy1TRGWTKQjaYQgzLIisM > =DpGn > -----END PGP SIGNATURE----- > _______________________________________________ > Zope maillist - [email protected] > https://mail.zope.org/mailman/listinfo/zope > ** No cross posts or HTML encoding! ** > (Related lists - > https://mail.zope.org/mailman/listinfo/zope-announce > https://mail.zope.org/mailman/listinfo/zope-dev ) _______________________________________________ Zope maillist - [email protected] https://mail.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - https://mail.zope.org/mailman/listinfo/zope-announce https://mail.zope.org/mailman/listinfo/zope-dev )