CVE-2022-24761

Advisory

[This advisory has been limited. Please create a free account to view the full advisory.]

Affected package

Affected versions

[This affected versions has been limited. Please create a free account to view the full affected versions.]

Fixed versions

[This fixed versions has been limited. Please create a free account to view the full fixed versions.]

Vulnerability changelog

------------------

- Update to newest compatible versions of dependencies.

- Update ``waitress`` to version 2.1.1 to mitigate a vulnerability in that
package. As that ``waitress`` no longer supports Python 3.6 it is not advised
to run Zope on Python 3.6 any longer even though it still supports Python
3.6.

- To run ``bin/buildout`` inside the Zope project now ``zc.buildout >= 2.13.7``
or ``zc.buildout >= 3.0.0b1`` is required.

Resources

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24761