These patches apply security fixes to z2.py that will help to secure your Zope installation against OS attacks and vice versa. They are especially important if you start Zope as root (i.e. to bind ZServer to port 80), but also help with other issues, such as an insecure umask making your ZODB readable to all users on your system. For more information on the security issues fixed, follow the Release Information link below.
These patches address Collector issue 1 as well as a more recently discovered problem with access being granted to Zope of root's group memberships.
Please let me know if these patches fail to compile on your UNIX-like operating system.
Log in
Forgot your password?
