Download Zope 2.11.2 / 2.10.7 / 2.9.10

Zope is a web application server written in the Python development language and released under the Zope Public License. It includes a transactional object database, dynamic HTML templates, scripts, a search engine and connections to relational databases. The program can be used completely independently, but it is also possible to link it to other programs, such as Apache. The developers of Zope have released four new releases with 2.11.2, 2.10.7, 2.9.10 and 2.8.10 as the version numbers. The lists of changes look like this:

Version 2.11.2:

• Ensure that response header values ​​cannot embed CRLF pairs, which violate the HTTP spec (RFC 2616).
• Launchpad #282677: fixed implementation of guarded_map and provided tests and implementation for guarded_zip (RestrictedPython).
• updated to ZODB 3.8.1
• Lauchpad #143736,#271395: fixed AttributeError’ on _ltid in TempStorage
• AccessControl.ZopeGuards.guarded_import mapped some Unauthorized exceptions onto ImportErrors: don’t do that! Also, removed mutable defaults from argument list, improved tests.
• LP #281156: AccessControl.SecurityInfo.secureModule dropped ModuleSecurity for failed imports, obscuring later attempts to import the same broken module.
• DateTime conversion of datetime objects with non-pytz tzinfo. Timezones() returns a copy of the timezone list (allows tests to run). (Backport or r89373 from trunk).
• LP #253362: better dealing with malformed HTTP_ACCEPT_CHARSET headers
• integrated Hotfix-2008-08-12
• Launchpad #267545: DateTime(DateTime()) now preserves the correct hour
• Launchpad #262313: respect the Expand macros when editing flag when editing a page template through the ZMI

Version 2.10.7:

• Ensure that response header values ​​cannot embed CRLF pairs, which violate the HTTP spec (RFC 2616).
• Launchpad #282677: fixed implementation of guarded_map and provided tests and implementation for guarded_zip (RestrictedPython).
• Lauchpad #143736,#271395: fixed AttributeError’ on _ltid in TempStorage
• AccessControl.ZopeGuards.guarded_import mapped some Unauthorized exceptions onto ImportErrors: don’t do that! Also, removed mutable defaults from argument list, improved tests.
• LP #281156: AccessControl.SecurityInfo.secureModule dropped ModuleSecurity for failed imports, obscuring later attempts to import the same broken module.
• LP #142667: Updated to ZODB-3.7.3 to fix problem with product auto-refresh.
• Updated to Five 1.5.8
• Launchpad #245649: the Products package is now a proper “namespace package” under the rules specified by setuptools.
• Fixed outdated transaction.commit(1) call in ZODBMountPoint.SimpleTrailblazer
• Launchpad #239636: Ensure that HEAD requests lock an empty body for NotFound errors.
• Launchpad #229549: Don’t ignore debug flag when rendering page templates (thanks to Eric Steele for the patch).
• integrated Hotfix-2008-08-12
• Launchpad #267545: DateTime(DateTime()) now preserves the correct hour
• Launchpad #262313: respect the Expand macros when editing flag when editing a page template through the ZMI

Version 2.9.10:

• Ensure that response header values ​​cannot embed CRLF pairs, which violate the HTTP spec (RFC 2616).
• Launchpad #282677: fixed implementation of guarded_map and provided tests and implementation for guarded_zip (RestrictedPython).
• AccessControl.ZopeGuards.guarded_import mapped some Unauthorized exceptions onto ImportErrors: don’t do that! Also, removed mutable defaults from argument list, improved tests.
• LP #281156: AccessControl.SecurityInfo.secureModule dropped ModuleSecurity for failed imports, obscuring later attempts to import the same broken module.
• LP #142667: Updated to ZODB-3.6.4 to fix problem with product auto-refresh.
• Launchpad #267545: DateTime(DateTime()) now preserves the correct hour
• Launchpad #245649: the Products package is now a proper “namespace package” under the rules specified by setuptools.
• Launchpad #239636: Ensure that HEAD requests lock an empty body for NotFound errors.
• Launchpad #234209: De-tabify ZPublisher/HTTPRequest.py
• integrated Hotfix-2008-08-12

Version 2.8.10:

• Ensure that response header values ​​cannot embed CRLF pairs, which violate the HTTP spec (RFC 2616).
• AccessControl.ZopeGuards.guarded_import mapped some Unauthorized exceptions onto ImportErrors: don’t do that! Also, removed mutable defaults from argument list, improved tests.
• LP #281156: AccessControl.SecurityInfo.secureModule dropped ModuleSecurity for failed imports, obscuring later attempts to import the same broken module.
• LP #142667: Updated to ZODB-3.4.5 to fix problem with product auto-refresh.
• Collector #2318: Allow override of zopectl’s control socket in zope.conf
• integrated Hotfix-2008-08-12

[break]The following releases can be downloaded:
Zope 2.11.2
Zope 2.10.7
Zope 2.9.10
Zope 2.8.10