News from Plone Website

This release fixes a number of bugs and includes a fix for the CVE-2007-5741 security issue.

For additional information about this project, please visit the project page.

Available downloads

Release Tarball

For all platforms (9.8 MB)

Release Notes

Plone 2.5.5 includes the fix for CVE-2007-5741

Change log

Plone 2.5.5 - Final - released December 4, 2007

    - Moved folder_rename logic into PloneTool and added
      savepoint+rollback there as well.  Additionally, folder_rename
      now requires POST requests.
      [alecm]

    - Moved most folder_publish and folder_delete logic into PloneTool
      methods.  Added savepoints and rollbacks for folder publish and
      delete actions, so that partial deletions/transitions are not
      committed.  Made folder_publish require POST. Thanks to rossp
      for finding this.
      [alecm]

    - Add support for show_ymd to the calendar widget template. This
      makes it possible to create time-only widgets.
      [wiggy]

    - Fix 2.1 migration issue for sites using QueueCatalog.
      [alecm]

    - Fix issues with non-ASCII characters in portal title.
      http://dev.plone.org/plone/ticket/6628
      [hannosch]

    - Fix security hole due to unsafe use of python pickles.
      [MJ, witsch, hannosch]