[LWN Logo]
[Timeline]
From: Brian Lloyd <Brian@digicool.com>
To: "'zope-announce@zope.org'" <zope-announce@zope.org>,
Subject: [Zope] ANNOUNCE: updated Hotfix release for recent mutable object issue
Date: Fri, 18 Aug 2000 11:25:51 -0400

Hi all -

We recently made a Hotfix release to address an issue 
dealing with Zope APIs returning mutable objects that 
could be changed inappropriately from DTML 
(Hotfix_08_09_2000). After further investigation, there 
was another aspect to the problem that was not addressed 
in the recent hotfix.

I've uploaded a new hotfix release (Hotfix_2000-08-17) 
that supercedes the one from the 9th and includes the 
extra fix required.

http://www.zope.org/Products/Zope/Hotfix_2000-08-17/

If you run a Zope site and allow untrusted users to edit 
DTML on your site, you should install this updated hotfix. 
There is no need to uninstall the prior hotfix release.
These fixes will also be in the 2.2.1 release, expected 
next week.


Brian Lloyd        brian@digicool.com
Software Engineer  540.371.6909              
Digital Creations  http://www.digicool.com 



_______________________________________________
Zope maillist  -  Zope@zope.org
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )