Security Announcements
The Plone Security Team will announce and pre-announce all hotfixes via this URL.
Security vulnerability pre-announcement: 20210518
Hotfix to patch various vulnerabilities. This hotfix is recommended for Plone 4.3, 5.0, 5.1 and 5.2.
Security patch released 20210518
Hotfix to patch various vulnerabilities. This hotfix is recommended for Plone 4.3, 5.0, 5.1 and 5.2.
Security vulnerability: 20151006 - CSRF
Patches to Zope and Plone for multiple CSRF issues.
New Waitress version, and updated 20200121 hotfix
An update to Waitress, and improved SQL escaping in the 20200121 hotfix
The text and illustrations in this website are licensed by the Plone Foundation under a Creative Commons Attribution-ShareAlike 4.0 International license. Plone and the Plone® logo are registered trademarks of the Plone Foundation, registered in the United States and other countries. For guidelines on the permitted uses of the Plone trademarks, see https://plone.org/foundation/logo. All other trademarks are owned by their respective owners.