On behalf of Zope developer community I am pleased to announce the release of Zope 4.6.2.
This bugfix release backports the stricter path expression traversal code from Zope 5. For the full list of changes see the change log at https://zope.readthedocs.io/en/4.x/changes.html#id1 Installation instructions can be found at https://zope.readthedocs.io/en/4.x/INSTALL.html NOTE FOR PLONE USERS: Make sure to install the latest version of PloneHotfix20210518 first, which should appear shortly after this Zope release. See https://plone.org/security/hotfix/20210518. Don't install Zope 4.6.2 into an existing Plone setup without testing. The traversal changes in Zope break some Plone add-ons that relied on the old traversal behavior. PloneHotfix20210518 ensures support for those Plone add-ons. Jens Vagelpohl
signature.asc
Description: Message signed with OpenPGP
_______________________________________________ Zope-Announce maillist - Zope-Announce@zope.org https://mail.zope.org/mailman/listinfo/zope-announce Zope-Announce for Announcements only - no discussions (Related lists - Users: https://mail.zope.org/mailman/listinfo/zope Developers: https://mail.zope.org/mailman/listinfo/zope-dev )