Plone 5.2.8

There may be hotfixes applicable to this release. Always check the Plone Hotfix page before production deployment.

Release notes

LicenseGPL
Date released2022-05-14
Release managerEric Steele

Plone 5.2.8 is a bug fix release of Plone 5.2. Release Manager for this version is Maurits van Rees (despite the automated text above).

Installers can be downloaded with the buttons below. Experienced users can update their buildout config by pointing to https://dist.plone.org/release/5.2.8/versions.cfg.

Linux/BSD/Unix users: Use the Unified Installer. It is a configuration and setup kit with build scripts.

Windows 10 users: use the Unified Installer. See Windows-specific installation instructions. Consider using the unified installer within the Windows Subsystem for Linux (WSL).

OS X users: use the Vagrant kit or install XCode command-line tools and use the Unified Installer.

Automated provisioning: See Plone's Ansible Playbook for a full-stack installation kit.

Cross-platform Docker: install Docker and use the Plone Docker image.

For the Plone 5.2 upgrade guide, see https://docs.plone.org/manage/upgrading/

Specific release notes for Plone 5.2.8:

Some highlights of this release are:

  • Zope: Enhance cookie support. For details, see issue 1010
    For more changes see Change log — Zope documentation 4.6 documentation
  • waitress is updated to version 2.1.1 to mitigate a vulnerability in that package. As waitress no longer supports Python versions less than 3.7 it is not advised to run Plone 5.2 on Python 2.7 or 3.6 any longer, even though they are still supported by Plone itself. You get an older waitress version then. If you must use an old Python version, please switch to a different WSGI server. See the recommendations in the Zope documentation.
  • WARNING: the new waitress 2.1.1 does seem to suffer from a possible race condition leading to the process quitting. If you are affected by this, you can downgrade to 2.1.0 (which has a known security vulnerability, as mentioned above) or use a different WSGI server.
  • plone.app.linkintegrity: Track link integrity of referenced PDFs and other site objects in IFRAME SRC references.
  • plone.outputfilters: Resolve UIDs in SRC attribute of of SOURCE and IFRAME elements.
  • plone.app.querystring: Add lazy attribute to vocabularies to prevent fetching any results.
  • plone.schema: Use indent in json.dumps to make JSON readable in the widget.

Downloads

Changes

zc.buildout: 2.13.4 → 2.13.7

plone.recipe.zope2instance: 6.10.2 → 6.11.0

New features:

  • By default, do not create a tempstorage on Plone 6. See issue 180. [maurits] (#180)

zest.releaser: 6.22.1 → 6.22.2

Products.MailHost: 4.11 → 4.12

  • Add support for Python 3.9 and 3.10.

mockup: 3.2.7 → 3.2.8

Bug fixes:

  • Fix duplicated initialization of result collection. Ref: #1152 [petschki] (#1152)

Plone: 5.2.7 → 5.2.8

Bug fixes:

  • Release Plone 5.2.8. [maurits]

plone.app.contentlisting: 2.0.6 → 2.0.7

Bug fixes:

  • realobject: Do not throw an AttributeError when accessing attributes which return None. (#42)

plone.app.customerize: 1.3.11 → 1.3.12

Bug fixes:

  • Fixed tests when run with zope.component 5+. [maurits] (#500)

plone.app.dexterity: 2.6.10 → 2.6.11

Bug fixes:

plone.app.discussion: 3.4.5 → 3.4.7

Bug fixes:

  • Grant Site Administrators the same workflow permissions as Managers. They were missing permissions on pending comments. [maurits] (#199)
  • Fix test after PortalTransforms uses lxml html method to serialize, instead of xml method. [gotcha] (#192)

plone.app.iterate: 4.0.2 → 4.0.3

Bug fixes:

  • Fix a typo in a a call to reindexObject (#101)

plone.app.linkintegrity: 3.5.0 → 3.6.1

New features:

  • Track link integrity of referenced PDFs and other site objects in IFRAME SRC references. (#84)

Bug fixes:

  • Test fix: only load plone.app.contenttypes migration layer on Python 2. [maurits] (#641)

plone.app.locales: 5.1.30 → 5.1.31

  • Fixes Portuguese integrity break message when deleting a content, to consider the masculine and feminine gender of the content type. [wesleybl]

plone.app.querystring: 1.4.15 → 1.5.0

New features:

  • Add lazy attribute to vocabularies to prevent fetching any results [reebalazs] (#104)

plone.app.upgrade: 2.1.0 → 2.1.1

Bug fixes:

  • Added upgrade to 5216, Plone 5.2.8. [maurits] (#5216)

plone.app.widgets: 3.0.6 → 3.0.7

Bug fixes:

  • fix robot tests [petschki] (#215)

plone.app.z3cform: 3.2.3 → 3.2.4

Bug fixes:

  • Add name attribute to form, if view.form_name is defined. See easyform issue 325. [maurits] (#325)

plone.autoform: 1.9.0 → 1.9.1

Bug fixes:

  • Fix tests when used with latest z3c.form [petschki] (#40)

plone.outputfilters: 4.0.2 → 4.1.0

New features:

  • Resolve UIDs in SRC= attribute of of SOURCE and IFRAME elements. (#47)

plone.restapi: 7.7.0 → 7.8.0

New features:

  • Make masking specific validation errors configurable in DX DeserializeFromJson. [fredvd] (#1211)

Bug fixes:

  • Prevent to create an empty AT content. [gbastien] (#1386)
  • Fix serializing revisions of Archetypes content. [pbauer] (#1335)

plone.schema: 1.3.0 → 1.4.0

New features:

  • Use indent in json.dumps to make JSON readable in the widget [MrTango] (#16)

plone.staticresources: 1.4.4 → 1.4.6

Bug fixes:

Products.CMFPlone: 5.2.7 → 5.2.8

Bug fixes:

  • Update WCAG version to 2.1 in the accessebility-info default content. [marwanatef2] (#3273)
  • Remove date range search fix, which was done in Products.ZCatalog. [wesleybl] (#3432)
  • Fix detection of initial login time [MrTango] (#3447)
  • Update metadata version to 5216, Plone 5.2.8. [maurits] (#5216)

Products.GenericSetup: 2.1.5 → 2.2.0

  • Add method tool.hasUpgrades. This is more efficient than checking if tool.listUpgrades returns a non-empty list.
  • Add options dest and simple to tool.listUpgrades. Use this to simplify the upgradeProfile method.
  • Fix #118: Import handler not found . (#118)
  • Allow passing quiet=True to upgradeProfile. Then we do not complain when the profile is not installed or needs no upgrade.

Products.PortalTransforms: 3.1.12 → 3.2.0

Bug fixes:

  • Prevent auto-closed empty tags in safe_html output. [cekk] (#43)

plone.app.versioningbehavior: 1.4.5 → 1.4.6

Bug fixes:

  • Removed deprecated plone.namedfile[blobs] from the test requirements. [maurits] (#106)

plone.formwidget.autocomplete: 1.4.0 → 1.4.1

plone.app.blocks: 5.0.0 → 5.0.1

plone.app.standardtiles: 2.3.2 → 2.4.2

plone.app.tiles: 3.2.3 → 3.3.0

Products.ATContentTypes: 3.0.6 → 3.0.7

Bug fixes:

  • Fix test after PortalTransforms uses lxml html method to serialize (instead of xml method). [gotcha] (#68)

Project resources

Learn about Plone