<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#CCCCCC" text="#000000">
So, to clarify, does this affect plain Zope 2.10, no Plone?<br>
<br>
Rich <br>
On 12/11/12 12:02, johannes raggam wrote:
<blockquote cite="mid:50A0E569.9060406@adm.at" type="cite">
<pre wrap="">-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
The affected versions go back a long time. I don't know it exactly,
but people have used it successfully with Plone 2.1 (from ancient
times) and I have patched Zope 2.8 instances too.
On 11/11/2012 09:43 PM, Allen Schmidt wrote:
</pre>
<blockquote type="cite">
<pre wrap="">For which zope versions?
On Nov 11, 2012 2:16 PM, "johannes raggam" <<a class="moz-txt-link-abbreviated" href="mailto:raggam-nl@adm.at">raggam-nl@adm.at</a>
<a class="moz-txt-link-rfc2396E" href="mailto:raggam-nl@adm.at"><mailto:raggam-nl@adm.at></a>> wrote:
You can just apply the Plone hotfix for Zope only installations.
The Plone patches are not applied then.
Johannes
On 11/11/2012 06:32 PM, Marcus Schopen wrote:
</pre>
<blockquote type="cite">
<pre wrap="">Hi,
</pre>
</blockquote>
<pre wrap="">
</pre>
<blockquote type="cite">
<pre wrap="">is a standard Zope affected by this security vulnerability or
only if Plone is installed:
</pre>
</blockquote>
<pre wrap="">
<a class="moz-txt-link-freetext" href="http://plone.org/products/plone/security/advisories/20121106-announcement">http://plone.org/products/plone/security/advisories/20121106-announcement</a>
</pre>
<blockquote type="cite">
<pre wrap="">The patch is replacing some basic classes therefore it looks to
me that Zope itself without any Plone is vulnerable too. If so
is there a Hotfix for Zope or new Zope version which fixes these
bugs?
</pre>
</blockquote>
<pre wrap="">
</pre>
<blockquote type="cite">
<pre wrap="">Ciao Marcus
</pre>
</blockquote>
<pre wrap="">
</pre>
<blockquote type="cite">
<pre wrap="">_______________________________________________ Zope maillist -
<a class="moz-txt-link-abbreviated" href="mailto:Zope@zope.org">Zope@zope.org</a> <a class="moz-txt-link-rfc2396E" href="mailto:Zope@zope.org"><mailto:Zope@zope.org></a>
</pre>
</blockquote>
<pre wrap=""><a class="moz-txt-link-freetext" href="https://mail.zope.org/mailman/listinfo/zope">https://mail.zope.org/mailman/listinfo/zope</a> ** No
</pre>
<blockquote type="cite">
<pre wrap="">cross posts or HTML encoding! ** (Related lists -
<a class="moz-txt-link-freetext" href="https://mail.zope.org/mailman/listinfo/zope-announce">https://mail.zope.org/mailman/listinfo/zope-announce</a>
<a class="moz-txt-link-freetext" href="https://mail.zope.org/mailman/listinfo/zope-dev">https://mail.zope.org/mailman/listinfo/zope-dev</a> )
</pre>
</blockquote>
<pre wrap="">
_______________________________________________ Zope maillist -
<a class="moz-txt-link-abbreviated" href="mailto:Zope@zope.org">Zope@zope.org</a> <a class="moz-txt-link-rfc2396E" href="mailto:Zope@zope.org"><mailto:Zope@zope.org></a>
<a class="moz-txt-link-freetext" href="https://mail.zope.org/mailman/listinfo/zope">https://mail.zope.org/mailman/listinfo/zope</a> ** No cross posts or
HTML encoding! ** (Related lists -
<a class="moz-txt-link-freetext" href="https://mail.zope.org/mailman/listinfo/zope-announce">https://mail.zope.org/mailman/listinfo/zope-announce</a>
<a class="moz-txt-link-freetext" href="https://mail.zope.org/mailman/listinfo/zope-dev">https://mail.zope.org/mailman/listinfo/zope-dev</a> )
</pre>
</blockquote>
<pre wrap="">
- --
programmatic web development
di(fh) johannes raggam / thet
python plone zope development
mail: <a class="moz-txt-link-abbreviated" href="mailto:office@programmatic.pro">office@programmatic.pro</a>
web: <a class="moz-txt-link-freetext" href="http://programmatic.pro">http://programmatic.pro</a>
<a class="moz-txt-link-freetext" href="http://bluedynamics.com">http://bluedynamics.com</a>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Mozilla - <a class="moz-txt-link-freetext" href="http://www.enigmail.net/">http://www.enigmail.net/</a>
iEYEARECAAYFAlCg5WkACgkQW4mNMQxDgAfsyACgvbuoNO8ocpordzJmbH3X0OA2
gCsAnAkFNozMy1TRGWTKQjaYQgzLIisM
=DpGn
-----END PGP SIGNATURE-----
_______________________________________________
Zope maillist - <a class="moz-txt-link-abbreviated" href="mailto:Zope@zope.org">Zope@zope.org</a>
<a class="moz-txt-link-freetext" href="https://mail.zope.org/mailman/listinfo/zope">https://mail.zope.org/mailman/listinfo/zope</a>
** No cross posts or HTML encoding! **
(Related lists -
<a class="moz-txt-link-freetext" href="https://mail.zope.org/mailman/listinfo/zope-announce">https://mail.zope.org/mailman/listinfo/zope-announce</a>
<a class="moz-txt-link-freetext" href="https://mail.zope.org/mailman/listinfo/zope-dev">https://mail.zope.org/mailman/listinfo/zope-dev</a> )
</pre>
</blockquote>
</body>
</html>