Comment 8 for bug 848807

Tres, thanks a lot for the work!

Since this is such a serious vulnerability, the Plone security team would like to hold of the hotfix release a bit and do a pre-announcement. So all vendors get a chance to plan and prepare for deploying the hotfix.

We'll do a pre-announcement of the upcoming patch, to be released on Tuesday October 4. And then we can handle the actual release of the code on that day. I can take care of the Zope-side of the hotfix release and also release proper new versions of Zope 2.12 and 2.13 at the same time.