Preannouncement of security update 2013-12-10

classic Classic list List threaded Threaded
1 message Options
Announce mailing list Announce mailing list
Reply | Threaded
Open this post in threaded view

Preannouncement of security update 2013-12-10

Hello everyone,

On behalf of the Plone Foundation I'd like to draw your attention to a
security announcement that was published a few minutes ago.

This is a pre-announcement only, it does not contain any vulnerability
details. Your sites are a safe today as they were yesterday.  However,
we are giving you advance warning that a patch is upcoming and
recommending that you plan a maintenance period for your sites to
coincide with the full announcement next week.

Full details are available at

You can feel free to ask more questions on the plone-users mailing list
or in the #plone IRC channel about details and how to protect yourself,
but it is important to make a plan for this now.  If you know you can't
install the fix at the time of release next week it would be a good idea
to plan the best time to have it installed with your administrators,
otherwise your site is potentially at risk from opportunistic hackers.

I would also like to take this opportunity to inform you of a change in
our policy for issuing hotfixes. We will now issue hotfixes
approximately every 4 months, with the next dates being:

* 10th December 2013
* 08th April 2014
* 12th August 2014
* 09th December 2014

In addition, while we take every care in issuing hotfixes that will work
with as many versions of Plone as possible, we only officially support
the following versions:

* 4.3.2
* 4.2.6
* 4.1.6
* 4.0.9
* 3.3.6

If you are using a version other than one listed above, you may get a
smoother experience by upgrading to the latest point release in that
series. For example, users of Plone 4.0.2 should find an upgrade to
4.0.9 easy. Again, for more information, please ask on plone-users or

Thank you for your attention,


November Webinars for C, C++, Fortran Developers
Accelerate application performance with scalable programming models. Explore
techniques for threading, error checking, porting, and tuning. Get the most
from the latest Intel processors and coprocessors. See abstracts and register
Plone-Announce mailing list
[hidden email]