I have a fix prepared for this. I thought about the issue a while and discussed this with Jim:
- We don't have to make this confidential (unhiding it now)
- It's security-related, but nothing that can be exploited. It therefore does neither justify an immediate bugfix releases nor an advisory.
The fix will go into Zope 3.3 and the trunk in a few minutes.
I have a fix prepared for this. I thought about the issue a while and discussed this with Jim:
- We don't have to make this confidential (unhiding it now)
- It's security-related, but nothing that can be exploited. It therefore does neither justify an immediate bugfix releases nor an advisory.
The fix will go into Zope 3.3 and the trunk in a few minutes.