Update AccessControl to version 6.2 to mitigate a security problem. (…

…#1148)
zopefoundation · Sep 4, 2023 · 49ec18f · 49ec18f
1 parent c31b1c6
commit 49ec18f
Show file tree

Hide file tree

Showing 5 changed files with 10 additions and 4 deletions.
diff --git a/CHANGES.rst b/CHANGES.rst
@@ -32,7 +32,11 @@ https://github.com/zopefoundation/Zope/blob/4.x/CHANGES.rst
 - Make Zope's parameters for denial of service protection configurable
   `#1141 <https://github.com/zopefoundation/Zope/issues/1141>_`.
 
-- Update ``RestrictedPython`` to 6.2 to mitigate a security problem.
+- Update ``RestrictedPython`` to version 6.2 to mitigate a security problem.
+  (CVE-2023-41039)
+
+- Update ``AccessControl`` to version 6.2 to mitigate a security problem.
+  (CVE-2023-41050)
 
 
 5.8.3 (2023-06-15)

diff --git a/constraints.txt b/constraints.txt
@@ -1,4 +1,4 @@
-AccessControl==6.1
+AccessControl==6.2
 Acquisition==5.0
 AuthEncoding==5.0
 BTrees==5.0

diff --git a/requirements-full.txt b/requirements-full.txt
@@ -1,5 +1,5 @@
 -e git+https://github.com/zopefoundation/Zope.git@master#egg=Zope
-AccessControl==6.1
+AccessControl==6.2
 Acquisition==5.0
 AuthEncoding==5.0
 BTrees==5.0

diff --git a/versions-prod.cfg b/versions-prod.cfg
@@ -4,7 +4,7 @@
 [versions]
 Zope =
 Zope2 = 4.0
-AccessControl = 6.1
+AccessControl = 6.2
 Acquisition = 5.0
 AuthEncoding = 5.0
 BTrees = 5.0

diff --git a/versions.cfg b/versions.cfg
@@ -24,6 +24,7 @@ docutils = 0.18.1
 five.localsitemanager = 4.0
 idna = 3.4
 imagesize = 1.4.1
+importlib-metadata = 5.1.0
 mr.developer = 2.0.1
 packaging = 23.1
 plone.recipe.command = 1.1
@@ -41,4 +42,5 @@ tempstorage = 6.0
 urllib3 = 2.0.3
 z3c.checkversions = 2.1
 zc.recipe.testrunner = 3.0
+zipp = 3.16.2
 zope.testrunner = 6.0