Plone security fixes 20260623
"Important Announcements, Plone releases, and security-related notifications. Recommended subscription for all Plone developers and site admins" <[email protected]> Thu, 2 Jul 2026 22:19:48 +0200
| Newsgroups | gmane.comp.web.zope.plone.announce |
|---|---|
| Message-ID | <mailman.21142.1783029776.1621.plone-announce@lists.sourceforge.net> |
This is a multi-part message in MIME format.
--===============5987666994941061096==
Content-Type: multipart/alternative;
boundary="------------wH5GAaxANC6M0ppFnxHRzy5S"
Content-Language: en-GB
This is a multi-part message in MIME format.
--------------wH5GAaxANC6M0ppFnxHRzy5S
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
This is a copy of an advisory published on plone.org and the community site:
https://plone.org/security/announcements/plone-security-advisory-20260623
https://community.plone.org/t/plone-security-fixes-20260623/23085
On behalf of the Plone/Zope Security Team I announce several
vulnerability fixes.
* Remote Code Execution via TALES Injection
<https://github.com/plone/plone.app.portlets/security/advisories/GHSA-rr49-f9g6-c9r5>,
severity 9.9 critical
* Denial of service via iCalendar import
<https://github.com/plone/plone.app.event/security/advisories/GHSA-r82h-mqw3-fc56>,
severity 9.1 critical
* Denial of service via RSS feed portlet
<https://github.com/plone/plone.app.portlets/security/advisories/GHSA-x5g3-w747-2h8q>,
severity 9.1 critical
* Denial of Service due to excessive title/description/filename
length, severity 6.5 moderate. This has fixes in two packages:
o |plone.app.dexterity|
<https://github.com/plone/plone.app.dexterity/security/advisories/GHSA-5426-92w4-wvhv>
o |plone.app.contenttypes|
<https://github.com/plone/plone.app.contenttypes/security/advisories/GHSA-8pcw-h6w9-h46g>
Two others were already made public recently, we list them here for good
measure:|icalendar|
<https://github.com/collective/icalendar/security/advisories/GHSA-cv84-9p8j-fj68>and|RestrictedPython|
<https://github.com/zopefoundation/RestrictedPython/security/advisories/GHSA-ffg3-p8fm-mjx2>.
Some are only a vulnerability on Classic UI (for example, Volto has no
portlets), but others are a vulnerability on Volto as well.
All these combined, you should update your Plone sites to the following
versions (formatted as pip constraints here):
Plone 6.2:
|icalendar==7.1.3 plone.app.contenttypes==5.0.1
plone.app.dexterity==5.0.1 plone.app.event==6.0.1
plone.app.portlets==7.0.2 RestrictedPython==8.3 |
Plone 6.1:
|plone.app.contenttypes==4.0.10 plone.app.dexterity==4.1.3
plone.app.event==5.2.4 plone.app.portlets==6.0.4 RestrictedPython==8.3 |
Plone 6.0:
|plone.app.contenttypes==3.0.12 plone.app.dexterity==3.2.3
plone.app.event==5.2.4 plone.app.portlets==5.0.8 RestrictedPython==8.3;
python_version > '3.10' |
You may want to check if you have already applied
the|plone.app.textfield|and|plone.restapi|fixes from theJune 5
announcement
<https://community.plone.org/t/security-vulnerability-announcement-plone-app-textfield-and-plone-restapi/23050>:
https://community.plone.org/t/security-vulnerability-announcement-plone-app-textfield-and-plone-restapi/23050
If you think a security issue was incompletely solved, please contact
the Plone/Zope Security Team via email atsecurity-z4DKO/[email protected]
If these versions cause other problems, you can comment below, or open
an issue in the|Products.CMFPlone|tracker
<https://github.com/plone/Products.CMFPlone/issues/>. Please check if
anything was reported already.
Meanwhile Plone 6.1.5 and 6.2.1 have been released with the above fixes,
and since today their plone-backend Docker images are available.
Kind regards,
Maurits van Rees
Plone/Zope Security Team
--------------wH5GAaxANC6M0ppFnxHRzy5S
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: 8bit
<!DOCTYPE html>
<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
</head>
<body>
<p>This is a copy of an advisory published on plone.org and the
community site:</p>
<a
href="https://plone.org/security/announcements/plone-security-advisory-20260623"
class="moz-txt-link-freetext">https://plone.org/security/announcements/plone-security-advisory-20260623</a><br>
<a
href="https://community.plone.org/t/plone-security-fixes-20260623/23085"
class="moz-txt-link-freetext">https://community.plone.org/t/plone-security-fixes-20260623/23085</a><br>
<p
style="margin-top: 0px; caret-color: rgb(34, 34, 34); color: rgb(34, 34, 34); font-family: Arial, sans-serif; font-size: 16px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration-line: none; text-decoration-thickness: auto; text-decoration-style: solid;"><br>
</p>
<p
style="margin-top: 0px; caret-color: rgb(34, 34, 34); color: rgb(34, 34, 34); font-family: Arial, sans-serif; font-size: 16px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration-line: none; text-decoration-thickness: auto; text-decoration-style: solid;">On
behalf of the Plone/Zope Security Team I announce several
vulnerability fixes.</p>
<ul
style="margin: 1em 0px 1em 1.25em; padding: 0px; clear: both; padding-inline-start: 1.25em; caret-color: rgb(34, 34, 34); color: rgb(34, 34, 34); font-family: Arial, sans-serif; font-size: 16px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration-line: none; text-decoration-thickness: auto; text-decoration-style: solid;">
<li><a
href="https://github.com/plone/plone.app.portlets/security/advisories/GHSA-rr49-f9g6-c9r5"
data-clicks="32"
aria-label="Remote Code Execution via TALES Injection link clicked 32 times"
style="background-color: rgba(0, 0, 0, 0); color: var(--d-link-color); text-decoration: none; cursor: pointer; overflow-wrap: break-word;">Remote
Code Execution via TALES Injection</a>, severity 9.9 critical</li>
<li><a
href="https://github.com/plone/plone.app.event/security/advisories/GHSA-r82h-mqw3-fc56"
data-clicks="12"
aria-label="Denial of service via iCalendar import link clicked 12 times"
style="background-color: rgba(0, 0, 0, 0); color: var(--d-link-color); text-decoration: none; cursor: pointer; overflow-wrap: break-word;">Denial
of service via iCalendar import</a>, severity 9.1 critical</li>
<li><a
href="https://github.com/plone/plone.app.portlets/security/advisories/GHSA-x5g3-w747-2h8q"
data-clicks="13"
aria-label="Denial of service via RSS feed portlet link clicked 13 times"
style="background-color: rgba(0, 0, 0, 0); color: var(--d-link-color); text-decoration: none; cursor: pointer; overflow-wrap: break-word;">Denial
of service via RSS feed portlet</a>, severity 9.1 critical</li>
<li>Denial of Service due to excessive title/description/filename
length, severity 6.5 moderate. This has fixes in two packages:
<ul
style="margin: 0px; padding: 0px; clear: both; padding-inline-start: 1.25em;">
<li><a
href="https://github.com/plone/plone.app.dexterity/security/advisories/GHSA-5426-92w4-wvhv"
data-clicks="5"
aria-label="plone.app.dexterity link clicked 5 times"
style="background-color: rgba(0, 0, 0, 0); color: var(--d-link-color); text-decoration: none; cursor: pointer; overflow-wrap: break-word;"><code
style="font-family: var(--d-font-family--monospace); font-size: 14px; color: var(--tertiary); background: var(--inline-code-bg); border-radius: var(--d-border-radius); line-height: 1.307692; padding: 2px 4px; white-space: pre-wrap;">plone.app.dexterity</code></a></li>
<li><a
href="https://github.com/plone/plone.app.contenttypes/security/advisories/GHSA-8pcw-h6w9-h46g"
data-clicks="4"
aria-label="plone.app.contenttypes link clicked 4 times"
style="background-color: rgba(0, 0, 0, 0); color: var(--d-link-color); text-decoration: none; cursor: pointer; overflow-wrap: break-word;"><code
style="font-family: var(--d-font-family--monospace); font-size: 14px; color: var(--tertiary); background: var(--inline-code-bg); border-radius: var(--d-border-radius); line-height: 1.307692; padding: 2px 4px; white-space: pre-wrap;">plone.app.contenttypes</code></a></li>
</ul>
</li>
</ul>
<p
style="caret-color: rgb(34, 34, 34); color: rgb(34, 34, 34); font-family: Arial, sans-serif; font-size: 16px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration-line: none; text-decoration-thickness: auto; text-decoration-style: solid;">Two
others were already made public recently, we list them here for
good measure:<span class="Apple-converted-space"> </span><a
href="https://github.com/collective/icalendar/security/advisories/GHSA-cv84-9p8j-fj68"
style="background-color: rgba(0, 0, 0, 0); color: var(--d-link-color); text-decoration: none; cursor: pointer; overflow-wrap: break-word;"><code
style="font-family: var(--d-font-family--monospace); font-size: 14px; color: var(--tertiary); background: var(--inline-code-bg); border-radius: var(--d-border-radius); line-height: 1.307692; padding: 2px 4px; white-space: pre-wrap;">icalendar</code></a>and<span
class="Apple-converted-space"> </span><a
href="https://github.com/zopefoundation/RestrictedPython/security/advisories/GHSA-ffg3-p8fm-mjx2"
data-clicks="3"
aria-label="RestrictedPython link clicked 3 times"
style="background-color: rgba(0, 0, 0, 0); color: var(--d-link-color); text-decoration: none; cursor: pointer; overflow-wrap: break-word;"><code
style="font-family: var(--d-font-family--monospace); font-size: 14px; color: var(--tertiary); background: var(--inline-code-bg); border-radius: var(--d-border-radius); line-height: 1.307692; padding: 2px 4px; white-space: pre-wrap;">RestrictedPython</code></a>.</p>
<p
style="caret-color: rgb(34, 34, 34); color: rgb(34, 34, 34); font-family: Arial, sans-serif; font-size: 16px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration-line: none; text-decoration-thickness: auto; text-decoration-style: solid;">Some
are only a vulnerability on Classic UI (for example, Volto has no
portlets), but others are a vulnerability on Volto as well.</p>
<p
style="caret-color: rgb(34, 34, 34); color: rgb(34, 34, 34); font-family: Arial, sans-serif; font-size: 16px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration-line: none; text-decoration-thickness: auto; text-decoration-style: solid;">All
these combined, you should update your Plone sites to the
following versions (formatted as pip constraints here):</p>
<p
style="caret-color: rgb(34, 34, 34); color: rgb(34, 34, 34); font-family: Arial, sans-serif; font-size: 16px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration-line: none; text-decoration-thickness: auto; text-decoration-style: solid;">Plone
6.2:</p>
<pre class="codeblock-buttons"
style="font-family: var(--d-font-family--monospace); font-size: 16px; max-height: 2000px; display: block; position: relative; overflow: visible; caret-color: rgb(34, 34, 34); color: rgb(34, 34, 34); font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration-line: none; text-decoration-thickness: auto; text-decoration-style: solid;"><div
class="codeblock-button-wrapper"
style="position: absolute; display: flex; right: 0px;"></div><code
class="hljs language-ini" data-highlighted="yes"
style="font-family: var(--d-font-family--monospace); font-size: 14px; color: var(--primary-very-high); background: var(--hljs-bg); border-radius: var(--d-border-radius); line-height: 1.307692; overflow: auto; tab-size: 4; display: block; padding: 12px; max-height: 500px;"><span
class="hljs-attr" style="color: var(--hljs-attr);">icalendar</span>==<span
class="hljs-number" style="color: var(--hljs-number);">7.1</span>.<span
class="hljs-number" style="color: var(--hljs-number);">3</span>
<span class="hljs-attr" style="color: var(--hljs-attr);">plone.app.contenttypes</span>==<span
class="hljs-number" style="color: var(--hljs-number);">5.0</span>.<span
class="hljs-number" style="color: var(--hljs-number);">1</span>
<span class="hljs-attr" style="color: var(--hljs-attr);">plone.app.dexterity</span>==<span
class="hljs-number" style="color: var(--hljs-number);">5.0</span>.<span
class="hljs-number" style="color: var(--hljs-number);">1</span>
<span class="hljs-attr" style="color: var(--hljs-attr);">plone.app.event</span>==<span
class="hljs-number" style="color: var(--hljs-number);">6.0</span>.<span
class="hljs-number" style="color: var(--hljs-number);">1</span>
<span class="hljs-attr" style="color: var(--hljs-attr);">plone.app.portlets</span>==<span
class="hljs-number" style="color: var(--hljs-number);">7.0</span>.<span
class="hljs-number" style="color: var(--hljs-number);">2</span>
<span class="hljs-attr" style="color: var(--hljs-attr);">RestrictedPython</span>==<span
class="hljs-number" style="color: var(--hljs-number);">8.3</span>
</code></pre>
<p
style="caret-color: rgb(34, 34, 34); color: rgb(34, 34, 34); font-family: Arial, sans-serif; font-size: 16px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration-line: none; text-decoration-thickness: auto; text-decoration-style: solid;">Plone
6.1:</p>
<pre class="codeblock-buttons"
style="font-family: var(--d-font-family--monospace); font-size: 16px; max-height: 2000px; display: block; position: relative; overflow: visible; caret-color: rgb(34, 34, 34); color: rgb(34, 34, 34); font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration-line: none; text-decoration-thickness: auto; text-decoration-style: solid;"><div
class="codeblock-button-wrapper"
style="position: absolute; display: flex; right: 0px;"></div><code
class="hljs language-ini" data-highlighted="yes"
style="font-family: var(--d-font-family--monospace); font-size: 14px; color: var(--primary-very-high); background: var(--hljs-bg); border-radius: var(--d-border-radius); line-height: 1.307692; overflow: auto; tab-size: 4; display: block; padding: 12px; max-height: 500px;"><span
class="hljs-attr" style="color: var(--hljs-attr);">plone.app.contenttypes</span>==<span
class="hljs-number" style="color: var(--hljs-number);">4.0</span>.<span
class="hljs-number" style="color: var(--hljs-number);">10</span>
<span class="hljs-attr" style="color: var(--hljs-attr);">plone.app.dexterity</span>==<span
class="hljs-number" style="color: var(--hljs-number);">4.1</span>.<span
class="hljs-number" style="color: var(--hljs-number);">3</span>
<span class="hljs-attr" style="color: var(--hljs-attr);">plone.app.event</span>==<span
class="hljs-number" style="color: var(--hljs-number);">5.2</span>.<span
class="hljs-number" style="color: var(--hljs-number);">4</span>
<span class="hljs-attr" style="color: var(--hljs-attr);">plone.app.portlets</span>==<span
class="hljs-number" style="color: var(--hljs-number);">6.0</span>.<span
class="hljs-number" style="color: var(--hljs-number);">4</span>
<span class="hljs-attr" style="color: var(--hljs-attr);">RestrictedPython</span>==<span
class="hljs-number" style="color: var(--hljs-number);">8.3</span>
</code></pre>
<p
style="caret-color: rgb(34, 34, 34); color: rgb(34, 34, 34); font-family: Arial, sans-serif; font-size: 16px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration-line: none; text-decoration-thickness: auto; text-decoration-style: solid;">Plone
6.0:</p>
<pre class="codeblock-buttons"
style="font-family: var(--d-font-family--monospace); font-size: 16px; max-height: 2000px; display: block; position: relative; overflow: visible; caret-color: rgb(34, 34, 34); color: rgb(34, 34, 34); font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration-line: none; text-decoration-thickness: auto; text-decoration-style: solid;"><div
class="codeblock-button-wrapper"
style="position: absolute; display: flex; right: 0px;"></div><code
class="hljs language-ini" data-highlighted="yes"
style="font-family: var(--d-font-family--monospace); font-size: 14px; color: var(--primary-very-high); background: var(--hljs-bg); border-radius: var(--d-border-radius); line-height: 1.307692; overflow: auto; tab-size: 4; display: block; padding: 12px; max-height: 500px;"><span
class="hljs-attr" style="color: var(--hljs-attr);">plone.app.contenttypes</span>==<span
class="hljs-number" style="color: var(--hljs-number);">3.0</span>.<span
class="hljs-number" style="color: var(--hljs-number);">12</span>
<span class="hljs-attr" style="color: var(--hljs-attr);">plone.app.dexterity</span>==<span
class="hljs-number" style="color: var(--hljs-number);">3.2</span>.<span
class="hljs-number" style="color: var(--hljs-number);">3</span>
<span class="hljs-attr" style="color: var(--hljs-attr);">plone.app.event</span>==<span
class="hljs-number" style="color: var(--hljs-number);">5.2</span>.<span
class="hljs-number" style="color: var(--hljs-number);">4</span>
<span class="hljs-attr" style="color: var(--hljs-attr);">plone.app.portlets</span>==<span
class="hljs-number" style="color: var(--hljs-number);">5.0</span>.<span
class="hljs-number" style="color: var(--hljs-number);">8</span>
<span class="hljs-attr" style="color: var(--hljs-attr);">RestrictedPython</span>==<span
class="hljs-number" style="color: var(--hljs-number);">8.3</span><span
class="hljs-comment"
style="color: var(--hljs-comment); font-style: italic;">; python_version > '3.10'</span>
</code></pre>
<p
style="caret-color: rgb(34, 34, 34); color: rgb(34, 34, 34); font-family: Arial, sans-serif; font-size: 16px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration-line: none; text-decoration-thickness: auto; text-decoration-style: solid;">You
may want to check if you have already applied the<span
class="Apple-converted-space"> </span><code
style="font-family: var(--d-font-family--monospace); font-size: 14px; color: var(--primary); background: var(--inline-code-bg); border-radius: var(--d-border-radius); line-height: 1.307692; padding: 2px 4px; white-space: pre-wrap;">plone.app.textfield</code><span
class="Apple-converted-space"> </span>and<span
class="Apple-converted-space"> </span><code
style="font-family: var(--d-font-family--monospace); font-size: 14px; color: var(--primary); background: var(--inline-code-bg); border-radius: var(--d-border-radius); line-height: 1.307692; padding: 2px 4px; white-space: pre-wrap;">plone.restapi</code><span
class="Apple-converted-space"> </span>fixes from the<span
class="Apple-converted-space"> </span><a
href="https://community.plone.org/t/security-vulnerability-announcement-plone-app-textfield-and-plone-restapi/23050"
data-clicks="8"
aria-label="June 5 announcement link clicked 8 times"
style="background-color: rgba(0, 0, 0, 0); color: var(--d-link-color); text-decoration: none; cursor: pointer; overflow-wrap: break-word;">June
5 announcement</a>:<br>
<a
href="https://community.plone.org/t/security-vulnerability-announcement-plone-app-textfield-and-plone-restapi/23050"
class="moz-txt-link-freetext">https://community.plone.org/t/security-vulnerability-announcement-plone-app-textfield-and-plone-restapi/23050</a><br>
</p>
<p
style="caret-color: rgb(34, 34, 34); color: rgb(34, 34, 34); font-family: Arial, sans-serif; font-size: 16px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration-line: none; text-decoration-thickness: auto; text-decoration-style: solid;">If
you think a security issue was incompletely solved, please contact
the Plone/Zope Security Team via email at<span
class="Apple-converted-space"> </span><a
href="mailto:security-z4DKO/[email protected]"
style="background-color: rgba(0, 0, 0, 0); color: var(--d-link-color); text-decoration: none; cursor: pointer; overflow-wrap: break-word;"
class="moz-txt-link-freetext">security-z4DKO/[email protected]</a>.</p>
<p
style="caret-color: rgb(34, 34, 34); color: rgb(34, 34, 34); font-family: Arial, sans-serif; font-size: 16px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration-line: none; text-decoration-thickness: auto; text-decoration-style: solid;">If
these versions cause other problems, you can comment below, or
open an issue in the<span class="Apple-converted-space"> </span><a
href="https://github.com/plone/Products.CMFPlone/issues/"
style="background-color: rgba(0, 0, 0, 0); color: var(--d-link-color); text-decoration: none; cursor: pointer; overflow-wrap: break-word;"><code
style="font-family: var(--d-font-family--monospace); font-size: 14px; color: var(--tertiary); background: var(--inline-code-bg); border-radius: var(--d-border-radius); line-height: 1.307692; padding: 2px 4px; white-space: pre-wrap;">Products.CMFPlone</code><span
class="Apple-converted-space"> </span>tracker</a>. Please
check if anything was reported already.</p>
<p
style="caret-color: rgb(34, 34, 34); color: rgb(34, 34, 34); font-family: Arial, sans-serif; font-size: 16px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration-line: none; text-decoration-thickness: auto; text-decoration-style: solid;">Meanwhile
Plone 6.1.5 and 6.2.1 have been released with the above fixes, and
since today their plone-backend Docker images are available.</p>
<p
style="caret-color: rgb(34, 34, 34); color: rgb(34, 34, 34); font-family: Arial, sans-serif; font-size: 16px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration-line: none; text-decoration-thickness: auto; text-decoration-style: solid;">Kind
regards,</p>
<p
style="caret-color: rgb(34, 34, 34); color: rgb(34, 34, 34); font-family: Arial, sans-serif; font-size: 16px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration-line: none; text-decoration-thickness: auto; text-decoration-style: solid;">Maurits
van Rees<br>
Plone/Zope Security Team</p>
<p
style="caret-color: rgb(34, 34, 34); color: rgb(34, 34, 34); font-family: Arial, sans-serif; font-size: 16px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration-line: none; text-decoration-thickness: auto; text-decoration-style: solid;"><br>
</p>
<p
style="caret-color: rgb(34, 34, 34); color: rgb(34, 34, 34); font-family: Arial, sans-serif; font-size: 16px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration-line: none; text-decoration-thickness: auto; text-decoration-style: solid;"><br>
</p>
<p><br>
</p>
<p><br>
</p>
</body>
</html>
--------------wH5GAaxANC6M0ppFnxHRzy5S--
--===============5987666994941061096==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
--===============5987666994941061096==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
_______________________________________________
Plone-Announce mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/plone-announce
--===============5987666994941061096==--