Silva 2.3.4 and Zope 2 security issue

Sylvain Viollon <[email protected]> Tue, 4 Oct 2011 17:50:29 +0200
Newsgroups gmane.comp.web.zope.silva.devel,gmane.comp.web.zope.silva.general
Message-ID <[email protected]>
Hello,

   Today there was a new release of Zope 2.12 and 2.13, fixing a security issue that could let
people run any command on the filesystem from any Zope 2 application without any authentication.

   The security issue does not affect Zope 2.11 and by so not Silva 2.2, or before.

   A new tag of Silva have been made today, 2.3.4, that uses this new Zope 2 version. I
recommend that all Silva 2.3 users make this update.

   https://svn.infrae.com/buildout/silva/tag/Silva-2.3.4

   This new version of Silva includes a new sidebar (sponsored by WUW), based on the catalog,
that is much faster on large sites (who have large sidebars). After updating your buildout,
you will need to either click on 'update content' in ZMI on service_extensions, or use the
silvaupdate script. This upgrade only takes a couple of minutes, even on large sites.

   A couple of other bugs have been fixed as well (mostly reported by Bethel).

   If you have a question don't hesitate,

   Regards,

  Sylvain,

-- 
Sylvain Viollon -- Infrae
t +31 10 243 7051 -- http://infrae.com
Hoevestraat 10 3033GC Rotterdam -- The Netherlands