Matt Behrens

These patches apply security fixes to z2.py that will help to secure your Zope installation against OS attacks and vice versa. They are especially important if you start Zope as root (i.e. to bind ZServer to port 80), but also help with other issues, such as an insecure umask making your ZODB readable to all users on your system. For more information on the security issues fixed, follow the Release Information link below.

These patches address Collector issue 1 as well as a more recently discovered problem with access being granted to Zope of root's group memberships.

Please let me know if these patches fail to compile on your UNIX-like operating system.

This is simply an aggregation of the latest ZOracleDA and the latest DCOracle that I formerly used at work, plus a setup file for Oracle 8.1.7. If you don't trust DCOracle2 yet, this is the "old, proven code". We are actively using DCOracle2 in production now, though, so give it a shot!