On 28 June 2011 14:40, Norbert Marrale <norbertmarr...@yahoo.com> wrote: > This should be clarified too: "You should, however, make sure that you > are running either Zope 2.10.13 or Zope 2.11.8 and PluggableAuthService > 1.5.5, 1.6.5 or 1.7.5 " > > Why must PluggableAuthService (+ its dependencies) even be installed?
The Plone Hotfix for CVE-2011-0720 included patches to PluggableAuthService. If you use PluggableAuthService outside of Plone then you need to update to a release that includes that fix. If you don't run PluggableAuthService it is not required to install it. Laurence _______________________________________________ Zope-Dev maillist - Zope-Dev@zope.org https://mail.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - https://mail.zope.org/mailman/listinfo/zope-announce https://mail.zope.org/mailman/listinfo/zope )
