[Zope-dev] New releases of Zope2 (incl. a potential security fix)

2010-07-13 Thread Hanno Schlichting
Hi.

I released Zope 2.12.9 and Zope 2.13.0a2 today. Both contain a fix for
the missing browser:view permission support
(https://bugs.launchpad.net/zope2/+bug/578326). As this might affect
security of your applications, you are advised to upgrade. Zope 2
itself is not vulnerable. Thanks goes to Martin Aspeli for
implementing this support on short notice.

In other news Zope 2.13.0a2 now officially supports Python 2.7.
Special thanks to David Glick for performing the security audit of
RestrictedPython. You can read more about the changes at
http://docs.zope.org/zope2/releases/2.13/CHANGES.html.

All the best,
Hanno
___
Zope-Dev maillist  -  Zope-Dev@zope.org
https://mail.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 https://mail.zope.org/mailman/listinfo/zope-announce
 https://mail.zope.org/mailman/listinfo/zope )


Re: [Zope-dev] New releases of Zope2 (incl. a potential security fix)

2010-07-13 Thread Stephan Richter
On Tuesday, July 13, 2010, Hanno Schlichting wrote:
 In other news Zope 2.13.0a2 now officially supports Python 2.7.

How can Zope 2.13 support Python 2.7, when the ZTK 1.0 does not?

Regards,
Stephan
-- 
Entrepreneur and Software Geek
Google me. Zope Stephan Richter
___
Zope-Dev maillist  -  Zope-Dev@zope.org
https://mail.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 https://mail.zope.org/mailman/listinfo/zope-announce
 https://mail.zope.org/mailman/listinfo/zope )


Re: [Zope-dev] New releases of Zope2 (incl. a potential security fix)

2010-07-13 Thread Hanno Schlichting
On Tue, Jul 13, 2010 at 3:08 PM, Stephan Richter
srich...@cosmos.phy.tufts.edu wrote:
 On Tuesday, July 13, 2010, Hanno Schlichting wrote:
 In other news Zope 2.13.0a2 now officially supports Python 2.7.

 How can Zope 2.13 support Python 2.7, when the ZTK 1.0 does not?

Zope 2.13 only uses the ZTK core part and overrides the ZODB3
requirement to use a 3.10 release. All tests on Python 2.7 pass for
all the zope.* packages. It's only the zopeapp set and the ZODB which
aren't compatible.

So from a Zope2 perspective we can support Python 2.7 in addition to
2.6 rather easily. Since everything works, it doesn't make a lot of
sense to hold off official 2.7 support. The ZTK has more code and
other Python versions to support, so it's in a different position.

Hanno
___
Zope-Dev maillist  -  Zope-Dev@zope.org
https://mail.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 https://mail.zope.org/mailman/listinfo/zope-announce
 https://mail.zope.org/mailman/listinfo/zope )