Hotfix Posted for security vulnerability 20130618
"Announcement of Plone releases and security-related notifications. Recommended subscription for all Plone developers and site admins." <[email protected]> Tue, 18 Jun 2013 13:53:43 -0700
| Newsgroups | gmane.comp.web.zope.plone.announce |
|---|---|
| Message-ID | <CAOqzbgi8OJ0cpRu11PtKDOH9JTrjXN3ia0A2J9eUya2jOraY+g@mail.gmail.com> |
--===============5797012916567851100==
Content-Type: multipart/alternative; boundary=089e013c6a70e2ee6804df73e9b9
--089e013c6a70e2ee6804df73e9b9
Content-Type: text/plain; charset=UTF-8
*Users of Plone 4.3, Plone 4.2, Plone 4.1, Plone 4, Plone 3, Plone 2.5 and
Plone 2.1 should immediately apply this hotfix. *
The Plone Security Team has posted Plone Hotfix 20130618 at:
http://plone.org/products/plone-hotfix/releases/20130618
Users of Plone 4.3, Plone 4.2, Plone 4.1, Plone 4, Plone 3, Plone 2.5 and
Plone 2.1 should immediately apply this hotfix. Full instructions on
applying the hotfix are on the hotfix page.
Please note that there is a version 1.1 of the hotfix. Version 1.0 was
discovered to cause problems on Plone 2.1 systems and with certain Plone
add ons.
The hotfix patches Zope and Plone for a variety of issues, including
arbitrary code execution and privilege escalation. Full announcement of the
security vulnerability is available at:
http://plone.org/products/plone/security/advisories/20130618-announcement
Extra Help
If you don't have in-house server administrators, a hosting service, or a
service agreement with a service provider who can handle the installation
of this patch, there is free support available via Plone mailing lists and
the Plone IRC channels. You can also find companies who can help with this
by visiting the Plone Service Providers <http://plone.org/support/providers>
listing.
--089e013c6a70e2ee6804df73e9b9
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
<div dir=3D"ltr"><div id=3D"parent-fieldname-description" class=3D""><b>Use=
rs of Plone 4.3, Plone 4.2, Plone 4.1, Plone 4,=20
Plone 3, Plone 2.5 and Plone 2.1 should immediately apply this hotfix.
</b></div>
=20
=20
=20
=20
<div id=3D"viewlet-above-content-body">
</div>
<div id=3D"content-core">
=20
=20
=20
=20
<div id=3D"parent-fieldname-text" class=3D"">
<p>The Plone Security Team has posted Plone Hotfix 20130618 at:=
</p>
<p><a title=3D"" href=3D"http://plone.org/products/plone-hotfix/releases/20=
130618" class=3D"" target=3D"_self">http://plone.org/products/plone-hotfix/=
releases/20130618</a></p>
<p>Users of Plone 4.3, Plone 4.2, Plone 4.1, Plone 4, Plone 3, Plone 2.5
and Plone 2.1 should immediately apply this hotfix. Full instructions=20
on applying the hotfix are on the hotfix page.</p>
<p>Please note that there is a version 1.1 of the hotfix. Version 1.0=20
was discovered to cause problems on Plone 2.1 systems and with certain=20
Plone add ons.</p>
<p>The hotfix patches Zope and Plone for a variety of issues, including=20
arbitrary code execution and privilege escalation. Full announcement of=20
the security vulnerability is available at:</p>
<p><a title=3D"" href=3D"http://plone.org/products/plone/security/advisorie=
s/20130618-announcement" class=3D"" target=3D"_self">http://plone.org/produ=
cts/plone/security/advisories/20130618-announcement</a></p>
<h3>Extra Help</h3>
<p>If you don't have in-house server administrators, a hosting service,=
=20
or a service agreement with a service provider who can handle the=20
installation of this patch, there is free support available via Plone=20
mailing lists and the Plone IRC channels. You can also find companies=20
who can help with this by visiting the <a href=3D"http://plone.org/support/=
providers">Plone Service Providers</a>=C2=A0listing.</p>
</div></div></div>
--089e013c6a70e2ee6804df73e9b9--
--===============5797012916567851100==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
------------------------------------------------------------------------------
This SF.net email is sponsored by Windows:
Build for Windows Store.
http://p.sf.net/sfu/windows-dev2dev
--===============5797012916567851100==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
_______________________________________________
Plone-Announce mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/plone-announce
--===============5797012916567851100==--