Maik Jablonski wrote at 2004-1-21 23:42 +0100:
> ...
>If we don't have a easy-to-install-security-fix for such people (or a so 
>called "stable" release, which works out of the box) we should a little 
>bit cautious about releasing exploits. That's my point...

Almost all the issues covered by Zope 2.6.3 are irrelevant
to the "normal" Zope installation (e.g. whether or not someone
gets a binding for "context/container" while he does not have
the object access permission).
I think only the "cross scripting exploits" may be a real problem for
"normal" installations. Their fix would probably have broken few


Zope-Dev maillist  -  [EMAIL PROTECTED]
**  No cross posts or HTML encoding!  **
(Related lists - )

Reply via email to