You can subscribe to this list here.
2002 |
Jan
|
Feb
(1) |
Mar
(62) |
Apr
(21) |
May
(138) |
Jun
(105) |
Jul
(231) |
Aug
(172) |
Sep
(283) |
Oct
(292) |
Nov
(179) |
Dec
(92) |
---|---|---|---|---|---|---|---|---|---|---|---|---|
2003 |
Jan
(151) |
Feb
(149) |
Mar
(59) |
Apr
(90) |
May
(177) |
Jun
(161) |
Jul
(231) |
Aug
(170) |
Sep
(362) |
Oct
(448) |
Nov
(253) |
Dec
(175) |
2004 |
Jan
(327) |
Feb
(254) |
Mar
(336) |
Apr
(215) |
May
(260) |
Jun
(300) |
Jul
(193) |
Aug
(200) |
Sep
(120) |
Oct
(346) |
Nov
(131) |
Dec
(156) |
2005 |
Jan
(127) |
Feb
(153) |
Mar
(219) |
Apr
(481) |
May
(391) |
Jun
(351) |
Jul
(496) |
Aug
(332) |
Sep
(335) |
Oct
(213) |
Nov
(351) |
Dec
(238) |
2006 |
Jan
(268) |
Feb
(499) |
Mar
(355) |
Apr
(293) |
May
(244) |
Jun
(341) |
Jul
(207) |
Aug
(286) |
Sep
(229) |
Oct
(197) |
Nov
(247) |
Dec
(292) |
2007 |
Jan
(505) |
Feb
(460) |
Mar
(373) |
Apr
(197) |
May
(106) |
Jun
(268) |
Jul
(200) |
Aug
(263) |
Sep
(193) |
Oct
(188) |
Nov
(378) |
Dec
(222) |
2008 |
Jan
(255) |
Feb
(553) |
Mar
(303) |
Apr
(436) |
May
(290) |
Jun
(340) |
Jul
(310) |
Aug
(179) |
Sep
(223) |
Oct
(286) |
Nov
(240) |
Dec
(162) |
2009 |
Jan
(164) |
Feb
(110) |
Mar
(220) |
Apr
(175) |
May
(227) |
Jun
(369) |
Jul
(224) |
Aug
(234) |
Sep
(146) |
Oct
(168) |
Nov
(239) |
Dec
(119) |
2010 |
Jan
(217) |
Feb
(216) |
Mar
(322) |
Apr
(217) |
May
(215) |
Jun
(209) |
Jul
(268) |
Aug
(209) |
Sep
(195) |
Oct
(163) |
Nov
(147) |
Dec
(145) |
2011 |
Jan
(147) |
Feb
(163) |
Mar
(185) |
Apr
(279) |
May
(269) |
Jun
(237) |
Jul
(397) |
Aug
(168) |
Sep
(394) |
Oct
(225) |
Nov
(278) |
Dec
(145) |
2012 |
Jan
(182) |
Feb
(264) |
Mar
(326) |
Apr
(254) |
May
(221) |
Jun
(250) |
Jul
(187) |
Aug
(247) |
Sep
(487) |
Oct
(256) |
Nov
(180) |
Dec
(146) |
2013 |
Jan
(176) |
Feb
(141) |
Mar
(181) |
Apr
(274) |
May
(138) |
Jun
(332) |
Jul
(136) |
Aug
(114) |
Sep
(74) |
Oct
(82) |
Nov
(165) |
Dec
(130) |
2014 |
Jan
(66) |
Feb
(229) |
Mar
(286) |
Apr
(96) |
May
(163) |
Jun
(103) |
Jul
(70) |
Aug
(81) |
Sep
(76) |
Oct
(60) |
Nov
(103) |
Dec
(95) |
2015 |
Jan
(79) |
Feb
(33) |
Mar
(89) |
Apr
(87) |
May
(46) |
Jun
(29) |
Jul
(45) |
Aug
(23) |
Sep
(107) |
Oct
(134) |
Nov
(146) |
Dec
(14) |
2016 |
Jan
(10) |
Feb
(26) |
Mar
(12) |
Apr
(12) |
May
(21) |
Jun
(9) |
Jul
(1) |
Aug
(7) |
Sep
(4) |
Oct
|
Nov
(1) |
Dec
(1) |
2017 |
Jan
(1) |
Feb
|
Mar
|
Apr
|
May
(5) |
Jun
(1) |
Jul
|
Aug
|
Sep
(2) |
Oct
|
Nov
|
Dec
|
2018 |
Jan
|
Feb
|
Mar
(2) |
Apr
|
May
|
Jun
(1) |
Jul
(2) |
Aug
(4) |
Sep
|
Oct
|
Nov
|
Dec
(2) |
2019 |
Jan
|
Feb
|
Mar
(4) |
Apr
|
May
(3) |
Jun
(2) |
Jul
(6) |
Aug
|
Sep
|
Oct
|
Nov
|
Dec
|
2021 |
Jan
|
Feb
|
Mar
(2) |
Apr
|
May
|
Jun
|
Jul
|
Aug
|
Sep
|
Oct
|
Nov
|
Dec
|
From: Matthew W. <mat...@pl...> - 2015-09-18 08:08:52
|
Open Source Retreat is one of a very small number of funding options available for core developers and experts to take a leave from the day job. It is not intended for students. Besides, it involves getting US visas and taking months off. There are not many people funding OSS in general, Google's Summer of Code is probably the biggest right now. It is also almost certainly the only one you'd qualify for. Matt On 17 Sep 2015 22:24, "prakhar joshi" <pra...@gm...> wrote: > Hello everyone, > > Just want to make myself clear that we can put the idea of > experimental.safe_html_transform > <https://github.com/collective/experimental.safe_html_transform> for the > same ? I guess it still needs few more time to get live. Any suggestions > @timo , @jamie , @Mattew ? > > Cheers, > > Prakhar Joshi > DA-IICT,Gandhinagar > > On Fri, Sep 18, 2015 at 2:00 AM, crisewing.com personal < > cr...@cr...> wrote: > >> I saw this announcement run across my twitter stream a bit ago and though >> there might be someone on this list who might be interested in applying: >> >> https://stripe.com/blog/open-source-retreat-2016 >> >> Cris >> >> >> ******************************* >> Cris Ewing, Developer LLC >> cr...@cr... >> http://crisewing.com >> 1.206.724.2112 >> >> >> >> ------------------------------------------------------------------------------ >> Monitor Your Dynamic Infrastructure at Any Scale With Datadog! >> Get real-time metrics from all of your servers, apps and tools >> in one place. >> SourceForge users - Click here to start your Free Trial of Datadog now! >> http://pubads.g.doubleclick.net/gampad/clk?id=241902991&iu=/4140 >> _______________________________________________ >> Plone-developers mailing list >> Plo...@li... >> https://lists.sourceforge.net/lists/listinfo/plone-developers >> >> > > > ------------------------------------------------------------------------------ > Monitor Your Dynamic Infrastructure at Any Scale With Datadog! > Get real-time metrics from all of your servers, apps and tools > in one place. > SourceForge users - Click here to start your Free Trial of Datadog now! > http://pubads.g.doubleclick.net/gampad/clk?id=241902991&iu=/4140 > _______________________________________________ > Plone-developers mailing list > Plo...@li... > https://lists.sourceforge.net/lists/listinfo/plone-developers > > |
From: Jens W. K. <je...@bl...> - 2015-09-18 07:41:41
|
ObjectInitializedEvent is AT portal_factory specific and only triggers in UI when object is created in portal_factory (to enable abort). So its better to listen on ObjectCreatedEvent instead. ObjectInitializedEvent is meant to populate a content with information before ist edited the first time. This does not make much sense for images uploaded by tinymce, because they are created directly with invokeFactory in the parent folder of the new type w/o portal_factory involved. If you abort initial editing the uploaded images are still there. hth Jens On 2015-09-16 17:44, Joerg Baach wrote: > Hi, > > I am fiddling around with Images that are uploaded/created by the user > on my plone site. I handle ObjectInitializedEvents, which works great, > except for Images uploaded through TinyMCE. TinyMCE uses invokeFactory, > but does not notify the Zope event system, as recommended (once upon a > time) by: > > http://docs.plone.org/old-reference-manuals/archetypes/create_event_hook.html#warnings-from-your-future > > I'd like to know if there is a specific reasoning that TinyMCE Uploads > don't notify - am I missing something? Is this intentional? > > Cheers, > > Joerg -- Klein & Partner KG, member of BlueDynamics Alliance |
From: prakhar j. <pra...@gm...> - 2015-09-17 21:23:07
|
Hello everyone, Just want to make myself clear that we can put the idea of experimental.safe_html_transform <https://github.com/collective/experimental.safe_html_transform> for the same ? I guess it still needs few more time to get live. Any suggestions @timo , @jamie , @Mattew ? Cheers, Prakhar Joshi DA-IICT,Gandhinagar On Fri, Sep 18, 2015 at 2:00 AM, crisewing.com personal <cr...@cr...> wrote: > I saw this announcement run across my twitter stream a bit ago and though > there might be someone on this list who might be interested in applying: > > https://stripe.com/blog/open-source-retreat-2016 > > Cris > > > ******************************* > Cris Ewing, Developer LLC > cr...@cr... > http://crisewing.com > 1.206.724.2112 > > > > ------------------------------------------------------------------------------ > Monitor Your Dynamic Infrastructure at Any Scale With Datadog! > Get real-time metrics from all of your servers, apps and tools > in one place. > SourceForge users - Click here to start your Free Trial of Datadog now! > http://pubads.g.doubleclick.net/gampad/clk?id=241902991&iu=/4140 > _______________________________________________ > Plone-developers mailing list > Plo...@li... > https://lists.sourceforge.net/lists/listinfo/plone-developers > > |
From: crisewing.com p. <cr...@cr...> - 2015-09-17 20:58:31
|
I saw this announcement run across my twitter stream a bit ago and though there might be someone on this list who might be interested in applying: https://stripe.com/blog/open-source-retreat-2016 <https://stripe.com/blog/open-source-retreat-2016> Cris ******************************* Cris Ewing, Developer LLC cr...@cr... http://crisewing.com 1.206.724.2112 |
From: David G. (Plone) <dav...@pl...> - 2015-09-17 16:53:34
|
On 9/17/15 1:03 AM, Johannes Raggam wrote: > I have quite a strange behavior with fulltext indexing, which I do not > fully understand. > > I use a custom indexer bound to a marker interface of a custom > Dexterity content type. When I do a "clear and rebuild", or just clear > the "SearchableText" index and reindex it again, all of my custom > content types are not indexed - even some News Items aren't but some > are. > > When I iterate over all custom content types, do a > context.reindexObject(idxs=['SearchableText']), followed by a > transaction.commit(), the same. Nothing lands in the SearchableText > index. > > When I do a context.reindexObject() only on one custom content type > object via plone.app.debugtoolbar, it gets indexed! > > Another content type gets normally indexed. It's nearly the same, just > that the INameFromTitle and IDublinCore behaviors aren't activated but > some others are. > > I use ZCTextIndex but also installed Products.TextIndexNG3. Same > behavior for both. > > Any ideas how to debug that? > For starters, put a pdb in your indexer to make sure it's getting called and that it doesn't throw an AttributeError (which will cause ZCatalog to not index it) |
From: Joerg B. <li...@ba...> - 2015-09-17 12:33:26
|
Hi Sean, thanks a lot for explaination. I will trz if I can make use of the container events. Johannes: the code in question can be found at https://github.com/plone/Products.TinyMCE/blob/master/Products/TinyMCE/adapters/Upload.py#L134 Cheers, Joerg On 16.09.2015 22:47, Sean Upton wrote: > > > On Wed, Sep 16, 2015 at 1:44 PM, Johannes Raggam <rag...@ad... > <mailto:rag...@ad...>> wrote: > > Do you mean Products.TinyMCE or the Plone 5 version? Can you point me > to the code, where invokeFactory within the TinyMCE related code is > called? > > > For Plone 4: Products.TinyMCE's upload does in fact use invokeFactory, > but invokeFactory (via all FactoryTypeInformation subclasses, including > Dexterity's) notifies events on content construction within container. > > For Plone 5, plone.app.content.browser.file.FileUploadView uses > plone.dexterity.utils.createContentInContainer(), which does notify > IObjectCreatedEvent, and via the > OFS.ObjectManager.ObjectManager._setObject() method IObjectAddedEvent is > notified. > > Sean |
From: Johannes R. <rag...@ad...> - 2015-09-17 08:03:51
|
I have quite a strange behavior with fulltext indexing, which I do not fully understand. I use a custom indexer bound to a marker interface of a custom Dexterity content type. When I do a "clear and rebuild", or just clear the "SearchableText" index and reindex it again, all of my custom content types are not indexed - even some News Items aren't but some are. When I iterate over all custom content types, do a context.reindexObject(idxs=['SearchableText']), followed by a transaction.commit(), the same. Nothing lands in the SearchableText index. When I do a context.reindexObject() only on one custom content type object via plone.app.debugtoolbar, it gets indexed! Another content type gets normally indexed. It's nearly the same, just that the INameFromTitle and IDublinCore behaviors aren't activated but some others are. I use ZCTextIndex but also installed Products.TextIndexNG3. Same behavior for both. Any ideas how to debug that? Best, Johannes |
From: Johannes R. <rag...@ad...> - 2015-09-16 21:18:07
|
I see. Was just wild guessing without checking it. On Wed, 2015-09-16 at 14:47 -0600, Sean Upton wrote: > > > On Wed, Sep 16, 2015 at 1:44 PM, Johannes Raggam <rag...@ad...> > wrote: > > Do you mean Products.TinyMCE or the Plone 5 version? Can you point > > me > > to the code, where invokeFactory within the TinyMCE related code is > > called? > For Plone 4: Products.TinyMCE's upload does in fact use > invokeFactory, but invokeFactory (via all FactoryTypeInformation > subclasses, including Dexterity's) notifies events on content > construction within container. > > For Plone 5, plone.app.content.browser.file.FileUploadView uses > plone.dexterity.utils.createContentInContainer(), which does notify > IObjectCreatedEvent, and via the > OFS.ObjectManager.ObjectManager._setObject() method IObjectAddedEvent > is notified. > > Sean |
From: Sean U. <sd...@gm...> - 2015-09-16 20:47:14
|
On Wed, Sep 16, 2015 at 1:44 PM, Johannes Raggam <rag...@ad...> wrote: > Do you mean Products.TinyMCE or the Plone 5 version? Can you point me > to the code, where invokeFactory within the TinyMCE related code is > called? > For Plone 4: Products.TinyMCE's upload does in fact use invokeFactory, but invokeFactory (via all FactoryTypeInformation subclasses, including Dexterity's) notifies events on content construction within container. For Plone 5, plone.app.content.browser.file.FileUploadView uses plone.dexterity.utils.createContentInContainer(), which does notify IObjectCreatedEvent, and via the OFS.ObjectManager.ObjectManager._setObject() method IObjectAddedEvent is notified. Sean |
From: Johannes R. <rag...@ad...> - 2015-09-16 19:44:13
|
Do you mean Products.TinyMCE or the Plone 5 version? Can you point me to the code, where invokeFactory within the TinyMCE related code is called? I first guess is that notify is was just forgotten there. Cheers, Johannes On Wed, 2015-09-16 at 17:44 +0200, Joerg Baach wrote: > Hi, > > I am fiddling around with Images that are uploaded/created by the > user > on my plone site. I handle ObjectInitializedEvents, which works > great, > except for Images uploaded through TinyMCE. TinyMCE uses > invokeFactory, > but does not notify the Zope event system, as recommended (once upon > a > time) by: > > http://docs.plone.org/old-reference-manuals/archetypes/create_event_h > ook.html#warnings-from-your-future > > I'd like to know if there is a specific reasoning that TinyMCE > Uploads > don't notify - am I missing something? Is this intentional? > > Cheers, > > Joerg > > --------------------------------------------------------------------- > --------- > Monitor Your Dynamic Infrastructure at Any Scale With Datadog! > Get real-time metrics from all of your servers, apps and tools > in one place. > SourceForge users - Click here to start your Free Trial of Datadog > now! > http://pubads.g.doubleclick.net/gampad/clk?id=241902991&iu=/4140 > _______________________________________________ > Plone-developers mailing list > Plo...@li... > https://lists.sourceforge.net/lists/listinfo/plone-developers |
From: Sean U. <sd...@gm...> - 2015-09-16 19:13:42
|
I don't think this is exempt from events, make sure you ware subscribing to the right events in your handler hookup. invokeFactory will notify IObjectCreatedEvent and IObjectAddedEvent for the new uploaded object, and IContainerModifiedEvent for its parent folder: https://github.com/zopefoundation/Products.CMFCore/blob/c9d6d02c1ee1a03868d94a16b70e4a8900494250/Products/CMFCore/TypesTool.py#L558 On Wed, Sep 16, 2015 at 9:44 AM, Joerg Baach <li...@ba...> wrote: > Hi, > > I am fiddling around with Images that are uploaded/created by the user > on my plone site. I handle ObjectInitializedEvents, which works great, > except for Images uploaded through TinyMCE. TinyMCE uses invokeFactory, > but does not notify the Zope event system, as recommended (once upon a > time) by: > > > http://docs.plone.org/old-reference-manuals/archetypes/create_event_hook.html#warnings-from-your-future > > I'd like to know if there is a specific reasoning that TinyMCE Uploads > don't notify - am I missing something? Is this intentional? > > Cheers, > > Joerg > > > ------------------------------------------------------------------------------ > Monitor Your Dynamic Infrastructure at Any Scale With Datadog! > Get real-time metrics from all of your servers, apps and tools > in one place. > SourceForge users - Click here to start your Free Trial of Datadog now! > http://pubads.g.doubleclick.net/gampad/clk?id=241902991&iu=/4140 > _______________________________________________ > Plone-developers mailing list > Plo...@li... > https://lists.sourceforge.net/lists/listinfo/plone-developers > |
From: Joerg B. <li...@ba...> - 2015-09-16 16:03:01
|
Hi, I am fiddling around with Images that are uploaded/created by the user on my plone site. I handle ObjectInitializedEvents, which works great, except for Images uploaded through TinyMCE. TinyMCE uses invokeFactory, but does not notify the Zope event system, as recommended (once upon a time) by: http://docs.plone.org/old-reference-manuals/archetypes/create_event_hook.html#warnings-from-your-future I'd like to know if there is a specific reasoning that TinyMCE Uploads don't notify - am I missing something? Is this intentional? Cheers, Joerg |
From: Héctor V. <hec...@gm...> - 2015-09-14 12:28:48
|
sorry for bringing this back, but... no, is not perfectly good to add "# noqa" for exceptions all over the place to avoid issues with line lengths. using "# noqa" disables ALL Flake8 warnings, including those of unused imports and variables; so, for instance if I have some line like this: for my.very.long.module.namespace import a_very_long_object_name # noqa and later I decide not to use a_very_long_object_name in my module, but forget to remove it from imports, Flake8 wouldn't care about it. "# noqa" is harmful and must be used very carefully. you decide what do you want to have: a bunch of tested code lines longer than 80 characters, or a bunch of untested code lines longer than 80 characters. best regards Héctor Velarde On 25/04/2015 02:43, Timo Stollenwerk wrote: > Yes. I have objections. We had a long discussion some time ago and > reached an agreement. Please look up the discussion. I don't want to > repeat everything that has been written back then. Please let's stop > this here and not waste time again and again on such details... > > And yes, I watched the talk. And yes, bad things happen if you obey the > 80 characters limit and turn off your brain at the same time. The 80 > characters limit is a hint for programmers that there MIGHT be a problem > with your code. If you are smart, you solve it in the right way and make > your code more readable. If you are not smart, you do the things > Hettinger describes in his talk. > > It is perfecly ok to use "# noqa" for exceptions and ignore the rule if > that makes sense. It is not ok to have two, three, or four different > "standards" (80, 90, 100, 120, ...) within the Python community. > > Timo |
From: Giorgio B. <ja...@ja...> - 2015-09-14 05:54:30
|
Hey friend! Check it out http://www.innovative-electrical.co.uk/book.php?ddy5 Giorgio Borelli |
From: Eric S. <es...@pl...> - 2015-09-13 19:56:08
|
Thanks. Released On 12 Sep 2015, at 9:05, Nathan Van Gheem wrote: > tested, looks fine. > > On Sat, Sep 12, 2015 at 6:44 AM, Eric Steele <es...@pl...> > wrote: > >> Please give it a try and let me know if there are any glaring >> build/upgrade errors. >> http://dist.plone.org/release/5.0rc2-pending/versions.cfg >> >> Eric >> >> >> ------------------------------------------------------------------------------ >> _______________________________________________ >> Plone-developers mailing list >> Plo...@li... >> https://lists.sourceforge.net/lists/listinfo/plone-developers >> > > > > -- > Nathan Van Gheem > Solutions Architect > Wildcard Corp |
From: Eric B. <ebr...@gm...> - 2015-09-13 07:55:42
|
no errors, and upgrade is fine On Sat, Sep 12, 2015 at 1:44 PM, Eric Steele <es...@pl...> wrote: > Please give it a try and let me know if there are any glaring > build/upgrade errors. > http://dist.plone.org/release/5.0rc2-pending/versions.cfg > > Eric > > > ------------------------------------------------------------------------------ > _______________________________________________ > Plone-developers mailing list > Plo...@li... > https://lists.sourceforge.net/lists/listinfo/plone-developers > |
From: Polyester <pa...@cl...> - 2015-09-12 18:38:10
|
On 12-09-15 13:44, Eric Steele wrote: > Please give it a try and let me know if there are any glaring > build/upgrade errors. > http://dist.plone.org/release/5.0rc2-pending/versions.cfg > > Eric > > ------------------------------------------------------------------------------ > test-run with 'pfix' branch of the documentation runs fine, all screenshots visually OK. (currently produces 72 screenshots with RobotFramework, so serves as some extra testing) polyester |
From: Philip B. <ba...@st...> - 2015-09-12 16:08:48
|
looks good. > Am 12.09.2015 um 15:05 schrieb Nathan Van Gheem <van...@gm...>: > > tested, looks fine. > > On Sat, Sep 12, 2015 at 6:44 AM, Eric Steele <es...@pl... <mailto:es...@pl...>> wrote: > Please give it a try and let me know if there are any glaring > build/upgrade errors. > http://dist.plone.org/release/5.0rc2-pending/versions.cfg <http://dist.plone.org/release/5.0rc2-pending/versions.cfg> > > Eric > > ------------------------------------------------------------------------------ > _______________________________________________ > Plone-developers mailing list > Plo...@li... <mailto:Plo...@li...> > https://lists.sourceforge.net/lists/listinfo/plone-developers <https://lists.sourceforge.net/lists/listinfo/plone-developers> > > > > -- > Nathan Van Gheem > Solutions Architect > Wildcard Corp > ------------------------------------------------------------------------------ > _______________________________________________ > Plone-developers mailing list > Plo...@li... > https://lists.sourceforge.net/lists/listinfo/plone-developers |
From: Nathan V. G. <van...@gm...> - 2015-09-12 13:05:11
|
tested, looks fine. On Sat, Sep 12, 2015 at 6:44 AM, Eric Steele <es...@pl...> wrote: > Please give it a try and let me know if there are any glaring > build/upgrade errors. > http://dist.plone.org/release/5.0rc2-pending/versions.cfg > > Eric > > > ------------------------------------------------------------------------------ > _______________________________________________ > Plone-developers mailing list > Plo...@li... > https://lists.sourceforge.net/lists/listinfo/plone-developers > -- Nathan Van Gheem Solutions Architect Wildcard Corp |
From: Eric S. <es...@pl...> - 2015-09-12 11:44:58
|
Please give it a try and let me know if there are any glaring build/upgrade errors. http://dist.plone.org/release/5.0rc2-pending/versions.cfg Eric |
From: <ng...@pl...> - 2015-09-10 16:50:43
|
The Plone security team is releasing the following hotfix that affects all current Plone versions. Please make arrangements to install this hotfix as soon as possible. See below for more information. https://plone.org/products/plone/security/advisories/20150910-announcement <https://plone.org/products/plone/security/advisories/20150910-announcement> https://plone.org/products/plone-hotfix/releases/20150910 <https://plone.org/products/plone-hotfix/releases/20150910> Security vulnerability: 20150910 - Multiple vectors Patches to Zope and Plone for a variety of issues. Versions Affected: All current Plone versions. Versions Not Affected: None. Nature of vulnerability: Allows creation of members by anonymous users on sites that have self-registration enabled. The patch can be added to buildouts as Products.PloneHotfix20150910 (available from PyPI) or downloaded from Plone.org This patch is compatible with all supported Plone versions (i.e. Plone 3, Plone 4, Plone 5). It may work on earlier versions of Plone, but as these are unsupported they have undergone less testing. This fix covers vulnerabilities spanning multiple versions of Plone. Immediate Measures You Should Take Disable self-registration until you have applied the patch. Installation Full installation instructions are available on the HotFix release page <https://plone.org/products/plone-hotfix/releases/20150910>. Extra Help Should you not have in-house server administrators or a service agreement looking after your website, you can find consulting companies at plone.com/providers <http://plone.com/providers>and plone.org/support/network <https://plone.org/support/network>. There is also free support <https://plone.org/support>available online via Plone mailing lists and the Plone IRC channels. Questions and Answers Q. What will be involved in applying the patch? A. Patches are made available as tarball-style archives that may be unpacked into the “products” folder of a buildout installation and as Python packages that may be installed by editing a buildout configuration file and running buildout. Patching is generally easy and quick to accomplish. Q: How were these vulnerability found? A: The majority of issues were found as part of audits performed by the Plone Security team. A subset were reported by users. More details will be available upon release of the patch. Q: My site is highly visible and mission-critical. I hear the patch has already been developed. Can I get the fix before the release date? A: No. The patch will be made available to all users at the same time . There are no exceptions. Q: If the patch has been developed already, why isn't it made available to the public now? A: The Security Team is still testing the patch and running various scenarios thoroughly. The team is also making sure everybody has appropriate time to plan to patch their Plone installation(s). Some consultancy organizations have hundreds of sites to patch and need the extra time to coordinate their efforts with their clients. Q: How does one exploit the vulnerability? A: This information will not be made public until after the patch is made available. General questions about this announcement , Plone patching procedures, and availability of support may be addressed to the Plone support forums <https://plone.org/support>. If you have specific questions about this vulnerability or its handling, contact the Plone Security Team <mailto:sec...@pl...>. To report potentially security-related issues , e-mail the Plone Security Team at sec...@pl... <mailto:sec...@pl...>. We are always happy to credit individuals and companies who make responsible disclosures. Information for Vulnerability Database Maintainers We have already applied for CVE numbers for these issues. Further information on individual vulnerabilities (including CVSS scores, CWE identifiers and summaries) is available at the full vulnerability list <https://plone.org/products/plone/security/> |
From: Ramon B. <ram...@go...> - 2015-09-09 19:48:25
|
Found the problem. Seems it was related to mr.developer in my buildout.cfg. See: https://github.com/collective/collective.github.com/issues/868 <https://github.com/collective/collective.github.com/issues/868> Just for the case someone encounters the same issue:) > Am 09.09.2015 um 21:29 schrieb Ramon Bartl <ram...@go...>: > > I can not push anymore to collective, are there permission problems? > > src/plone.jsonapi.routes [ git push > fatal: remote error: > You can't push to git://github.com/collective/plone.jsonapi.routes.git <git://github.com/collective/plone.jsonapi.routes.git> > Use https://github.com/collective/plone.jsonapi.routes.git <https://github.com/collective/plone.jsonapi.routes.git> > > Did someone else encounter the same problem or is this only on my site? > > Ramon > > -- > Ramon Bartl > Dipl. Informatiker (FH) > > mail: ramon.bartl@googlemail. <mailto:ram...@ya...>com > fon: +49 160 5551008 > https://github.com/ramonski <https://github.com/ramonski> > https://www.linkedin.com/in/ramonski <https://www.linkedin.com/in/ramonski> -- Ramon Bartl Dipl. Informatiker (FH) mail: ramon.bartl@googlemail. <mailto:ram...@ya...>com fon: +49 160 5551008 https://github.com/ramonski <https://github.com/ramonski> https://www.linkedin.com/in/ramonski <https://www.linkedin.com/in/ramonski> |
From: Ramon B. <ram...@go...> - 2015-09-09 19:30:09
|
I can not push anymore to collective, are there permission problems? src/plone.jsonapi.routes [ git push fatal: remote error: You can't push to git://github.com/collective/plone.jsonapi.routes.git Use https://github.com/collective/plone.jsonapi.routes.git Did someone else encounter the same problem or is this only on my site? Ramon -- Ramon Bartl Dipl. Informatiker (FH) mail: ramon.bartl@googlemail. <mailto:ram...@ya...>com fon: +49 160 5551008 https://github.com/ramonski <https://github.com/ramonski> https://www.linkedin.com/in/ramonski <https://www.linkedin.com/in/ramonski> |
From: Steve M. <st...@dc...> - 2015-09-08 22:19:06
|
With Plone 5 coming soon, please take note: When the installers are build, I will take the latest *release* versions of support/development tools like bobtemplates.plone. If you are a release manager for one of the non-Plone packages that are used in the installer, and you want a non-release version (like a beta or rc) included instead, please let me know before Eric tags 5.0. At the moment, here are the non-Plone pins for the RC1 installer: MarkupSafe = 0.23 Pillow = 2.9.0 Products.DocFinderTab = 1.0.5 bobtemplates.plone = 0.11 buildout.sanitycheck = 1.0.2 collective.checkdocs = 0.2 collective.recipe.backup = 2.20 mr.bob = 0.1.2 plone.recipe.unifiedinstaller = 4.3.2 zest.pocompile = 1.4 zest.releaser = 5.5 colorama = 0.3.3 z3c.recipe.scripts = 1.0.1 Steve |
From: Vctor F. de A. <ja...@ja...> - 2015-09-08 13:33:11
|
Hello! Important message, visit http://spring-world.com/walking.php?f Vctor Fernndez de Alba |