Re: [Plone-developers] URGENT / ACTION REQUIRED: Plone security vulnerability, hotfix 20150910

Nathan Van Gheem <[email protected]> Mon, 21 Sep 2015 21:20:26 -0500
Newsgroups gmane.comp.web.zope.plone.user,gmane.comp.web.zope.plone.devel
Message-ID <CAL8hw9ES0tf1ysg7UDObb5kYsrQzph5AdbLSHxHO0djOKUi4Kw@mail.gmail.com>
--===============1038379259700278216==
Content-Type: multipart/alternative; boundary=001a11425a4e234d2005204ca4e9

--001a11425a4e234d2005204ca4e9
Content-Type: text/plain; charset=UTF-8

IMO, it's probably best to monitor:
https://plone.org/products/plone/security/advisories/all-advisories/RSS

We should be trying to hit-up all lists with the announcements though.

On Mon, Sep 21, 2015 at 5:55 AM, Jean Jordaan <[email protected]>
wrote:

> Hi Kim and all
>
> I've been asked what the proper place is to monitor for Plone security
> alerts. This one was sent to plone-announce, -users, -dev, posted on the
> community site, and to the Plone site.
>
> It doesn't show up at the sourceforge list archive for plone-announce (it
> shows nothing for 2015), so I wanted to check if this list is still
> working.
>
> The other lists and community site are too noisy for sysadmin staff to
> monitor. The RSS feed from the Plone site could work, but RSS is pull,
> which is bad for alerts.
>
> What's the best place to monitor for alerts?
>
> --
> Jean
>
>
> ------------------------------------------------------------------------------
>
> _______________________________________________
> Plone-developers mailing list
> Plone-developers-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org
> https://lists.sourceforge.net/lists/listinfo/plone-developers
>
>


-- 
Nathan Van Gheem
Solutions Architect
Wildcard Corp

--001a11425a4e234d2005204ca4e9
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">IMO, it&#39;s probably best to monitor:=C2=A0<a href=3D"ht=
tps://plone.org/products/plone/security/advisories/all-advisories/RSS">http=
s://plone.org/products/plone/security/advisories/all-advisories/RSS</a><div=
><br></div><div>We should be trying to hit-up all lists with the announceme=
nts though.</div></div><div class=3D"gmail_extra"><br><div class=3D"gmail_q=
uote">On Mon, Sep 21, 2015 at 5:55 AM, Jean Jordaan <span dir=3D"ltr">&lt;<=
a href=3D"mailto:[email protected]" target=3D"_blank">jean.jordaan@gma=
il.com</a>&gt;</span> wrote:<br><blockquote class=3D"gmail_quote" style=3D"=
margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><p dir=3D"lt=
r">Hi Kim and all</p>
<p dir=3D"ltr">I&#39;ve been asked what the proper place is to monitor for =
Plone security alerts. This one was sent to plone-announce, -users, -dev, p=
osted on the community site, and to the Plone site.</p>
<p dir=3D"ltr">It doesn&#39;t show up at the sourceforge list archive for p=
lone-announce (it shows nothing for 2015), so I wanted to check if this lis=
t is still working. </p>
<p dir=3D"ltr">The other lists and community site are too noisy for sysadmi=
n staff to monitor. The RSS feed from the Plone site could work, but RSS is=
 pull, which is bad for alerts.</p>
<p dir=3D"ltr">What&#39;s the best place to monitor for alerts?</p><span cl=
ass=3D"HOEnZb"><font color=3D"#888888">
<p dir=3D"ltr">-- <br>
Jean</p>
</font></span><br>---------------------------------------------------------=
---------------------<br>
<br>_______________________________________________<br>
Plone-developers mailing list<br>
<a href=3D"mailto:Plone-developers-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org">Plone-developers@=
lists.sourceforge.net</a><br>
<a href=3D"https://lists.sourceforge.net/lists/listinfo/plone-developers" r=
el=3D"noreferrer" target=3D"_blank">https://lists.sourceforge.net/lists/lis=
tinfo/plone-developers</a><br>
<br></blockquote></div><br><br clear=3D"all"><div><br></div>-- <br><div cla=
ss=3D"gmail_signature"><div dir=3D"ltr">Nathan Van Gheem<div>Solutions Arch=
itect</div><div>Wildcard Corp</div></div></div>
</div>

--001a11425a4e234d2005204ca4e9--


--===============1038379259700278216==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

------------------------------------------------------------------------------

--===============1038379259700278216==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Plone-Users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/plone-users

--===============1038379259700278216==--