Deadline extend for PLOG 2012 registration!

------------------------------------------------------------------------------
Better than sec? Nothing is better than sec when it comes to
monitoring Big Data applications. Try Boundary one-second 
resolution app monitoring today. Free.
http://p.sf.net/sfu/Boundary-dev2dev

_______________________________________________
Plone-Announce mailing list
Plone-Announce@...
https://lists.sourceforge.net/lists/listinfo/plone-announce

Plone Open Garden 2012: call for discussion online!

------------------------------------------------------------------------------
This SF email is sponsosred by:
Try Windows Azure free for 90 days Click Here 
http://p.sf.net/sfu/sfd2d-msazure

_______________________________________________
Plone-Announce mailing list
Plone-Announce@...
https://lists.sourceforge.net/lists/listinfo/plone-announce

Speaker proposals for Plone Symposium East due Monday, March 12, 2012

------------------------------------------------------------------------------
Virtualization & Cloud Management Using Capacity Planning
Cloud computing makes use of virtualization - but cloud computing 
also focuses on allowing computing to be delivered as a service.
http://www.accelacomm.com/jaw/sfnl/114/51521223/

_______________________________________________
Plone-Announce mailing list
Plone-Announce@...
https://lists.sourceforge.net/lists/listinfo/plone-announce

Announcing Plone Symposium East 2012

------------------------------------------------------------------------------
RSA(R) Conference 2012
Mar 27 - Feb 2
Save $400 by Jan. 27
Register now!
http://p.sf.net/sfu/rsa-sfdev2dev2

_______________________________________________
Plone-Announce mailing list
Plone-Announce@...
https://lists.sourceforge.net/lists/listinfo/plone-announce

Plone Conference 2012 Call for Proposals

------------------------------------------------------------------------------
All the data continuously generated in your IT infrastructure 
contains a definitive record of customers, application performance, 
security threats, fraudulent activity, and more. Splunk takes this 
data and makes sense of it. IT sense. And common sense.
http://p.sf.net/sfu/splunk-novd2d

_______________________________________________
Plone-Announce mailing list
Plone-Announce@...
https://lists.sourceforge.net/lists/listinfo/plone-announce

Plone 4.1.3 released

Plone 4.1.3 is now available to those of you running buildout. Point your extends= to http://dist.plone.org/release/4.1.3/versions.cfg.

Installers will be available shortly.

Eric

------------------------------------------------------------------------------
All the data continuously generated in your IT infrastructure 
contains a definitive record of customers, application performance, 
security threats, fraudulent activity, and more. Splunk takes this 
data and makes sense of it. IT sense. And common sense.
http://p.sf.net/sfu/splunk-novd2d

_______________________________________________
Plone-Announce mailing list
Plone-Announce@...
https://lists.sourceforge.net/lists/listinfo/plone-announce

Reminder: Self-nominations for Plone Foundation board now open!

Reminder: self-nominations for Plone Foundation board elections are
now open.  Details below, deadline is November 2.

cheers,
jon

---------- Forwarded message ----------
From: Jon Stahl <jonstahl@...>
Date: Fri, Oct 14, 2011 at 7:13 PM
Subject: Self-nominations for Plone Foundation board now open!

Greetings Plone Community!

With Plone Conference 2011 just a few weeks away, that means that
Plone Foundation board elections are fast approaching, and thus that
the self-nomination process for people interested in serving on the
Plone Foundation board of directors is now open!

Full details and instructions for self-nominating at:
 https://plone.org/foundation/meetings/membership/2011-membership-meeting/nominations-open

- The Plone Foundation has an elected, all-volunteer 7-member board of
directors.
- Board members must self nominate by November 2, 10pm UTC.
- You do NOT have to be a Plone Foundation member to nominate
yourself, but all nominees must be seconded by an active Plone
Foundation member.
- Board elections are held during Plone Conference (you can vote
either in-person or via email, details forthcoming)

As someone who's wrapping up my third term on the Plone Foundation
board, I can tell you that it is fun, rewarding, and a important way
to serve the Plone community.  It's not a huge amount of time, but you
do have to be consistent and diligent on follow-through.

cheers,
jon
---
Jon Stahl
Plone Foundation Board Secretary

------------------------------------------------------------------------------
The demand for IT networking professionals continues to grow, and the
demand for specialized networking skills is growing even more rapidly.
Take a complimentary Learning <at> Cisco Self-Assessment and learn 
about Cisco certifications, training, and career opportunities. 
http://p.sf.net/sfu/cisco-dev2dev

Self-nominations for Plone Foundation board now open!

Greetings Plone Community!

With Plone Conference 2011 just a few weeks away, that means that
Plone Foundation board elections are fast approaching, and thus that
the self-nomination process for people interested in serving on the
Plone Foundation board of directors is now open!

Full details and instructions for self-nominating at:
 https://plone.org/foundation/meetings/membership/2011-membership-meeting/nominations-open

- The Plone Foundation has an elected, all-volunteer 7-member board of
directors.
- Board members must self nominate by November 2, 10pm UTC.
- You do not have to be a Plone Foundation member to nominate
yourself, but all nominees must be seconded by an active Plone
Foundation member.
- Board elections are held during Plone Conference (you can vote
either in-person or via email, details forthcoming)

As someone who's wrapping up my third term on the Plone Foundation
board, I can tell you that it is fun, rewarding, and a important way
to serve the Plone community.  It's not a huge amount of time, but you
do have to be consistent and diligent on follow-through.

cheers,
jon
---
Jon Stahl
Plone Foundation Board Secretary

------------------------------------------------------------------------------
All the data continuously generated in your IT infrastructure contains a
definitive record of customers, application performance, security
threats, fraudulent activity and more. Splunk takes this data and makes
sense of it. Business sense. IT sense. Common sense.
http://p.sf.net/sfu/splunk-d2d-oct

Security Announcement: Hotfix 20110928 released

Last week, the Zope and Plone security teams announced the discovery
of a serious security issue affecting all recent versions of Zope and
Plone, as well as the planned release of a Hotfix to address this
issue to be made today, Tuesday 4th October at 1500 UTC.

The Plone and Zope security teams are announcing that this security
hotfix is now available for download. For full instructions on how to
get and install the Hotfix, go here:
http://plone.org/products/plone-hotfix/releases/20110928

To find out more about the details of the issue, answers to common
questions and which versions of Zope and Plone are affected, please
see: http://plone.org/products/plone/security/advisories/20110928

Assistance in installing this hotfix is available free of charge via
IRC in #plone. If you don't have in-house server administrators
or a service agreement supporting your website, you can find
consultancy companies under the providers section of Plone.org -
http://plone.org/support/network

On behalf of the Plone security team,

Laurence

------------------------------------------------------------------------------
All the data continuously generated in your IT infrastructure contains a
definitive record of customers, application performance, security
threats, fraudulent activity and more. Splunk takes this data and makes
sense of it. Business sense. IT sense. Common sense.
http://p.sf.net/sfu/splunk-d2dcopy1

Important: New Plone hotfix; please patch your sites ASAP

The Plone Security team released a new hotfix this morning, "Plone 
Hotfix 20110531," addressing 4 vulnerabilities.  Please take the time as 
soon as possible to install this hotfix on any sites for which you are 
responsible.

Installation instructions for the hotfix can be found at 
http://plone.org/products/plone-hotfix/releases/20110531

The hotfix addresses the following 4 vulnerabilities:

1. Reflected XSS attack: A crafted URL can display arbitrary HTML 
output. This is a vulnerability in CMFPlone affecting all versions of 
Plone. Thanks to S. Streichsbier of SEC Consult for the responsible 
disclosure. See CVE-2011-1948 for details. 
http://plone.org/products/plone/security/advisories/CVE-2011-1948

2. Persistent XSS attack: Certain valid HTML will allow Javascript 
filtering to be bypassed. This is a vulnerability in 
Products.PortalTransforms affecting all versions of Plone using it, 
including 2.1 through 4.1. Thanks to Daniel Berlin and Dan Bentley both 
of Google and Brian Peters an independent researcher, for responsibly 
disclosing this independently of each other. See CVE-2011-1949 for 
details. http://plone.org/products/plone/security/advisories/CVE-2011-1949

3. Unauthorized data changes: One form allows users to edit the 
properties of other users. This is a vulnerability in plone.app.users 
affecting Plone 4.0 and 4.1. See CVE-2011-1950 for details. Please note: 
This vulnerability was disclosed prior to release of the hotfix, and it 
is highly recommended that site administrators and privileged users 
reset their passwords.  
http://plone.org/products/plone/security/advisories/CVE-2011-1950

4. Denial of service: A user can prevent other users from logging in. 
This is a vulnerability in Products.PluggableAuthService affecting all 
versions of Plone using it, including 2.5 through 4.1. Thanks to Alan 
Hoey of Team Rubber for the responsible disclosure. See PAS ticket 
#789858 for details. https://bugs.launchpad.net/zope-pas/+bug/789858

The hotfix is supported on Plone 3 and 4. It is also known to work on 
Plone 2.5, and may work on older versions of Plone. The fixes included 
will be incorporated into subsequent releases of Plone, so Plone 4.0.7, 
4.1rc3, and greater should not require this hotfix.

We would also appreciate your assistance in spreading word of this 
hotfix to other Plone site administrators who may not have gotten the 
word yet.

thanks,
David Glick
on behalf of the Plone Security team

----------		
David Glick
 Web Developer
 davidglick@...
 206.286.1235x32

Groundwire: You Are Connected		
 http://groundwire.org		

Online tools and strategies for the environmental movement.  Sign up for Groundwire News!
 http://groundwire.org/email-capture

------------------------------------------------------------------------------
Simplify data backup and recovery for your virtual environment with vRanger. 
Installation's a snap, and flexible recovery options mean your data is safe,
secure and there when you need it. Data protection magic?
Nope - It's vRanger. Get your free trial download today. 
http://p.sf.net/sfu/quest-sfdev2dev

Plone-Announce will soon be replaced -- you must resubscribe!

Greetings Plone Community!

We're upgrading Plone's email discussion mechanism from a Sourceforge
email broadcast list to a shiny new Feedburner email subscription
widget!  This will give us:

* Easier subscription & unsubscription
* Rock-solid email deliverability
* Automatic publishing via RSS feed (and thus more timely email notifications!)
* Much, much more!

Unfortunately, we won't be able to auto-migrate your existing
plone-announce subscription over, so please take a moment to visit:

  http://plone.org/follow

and subscribe via email there.  You can also choose to follow Plone
announcements via Facebook, Twitter or RSS.  (All four streams will
now carry the same content!)

Thanks Cioppino Sprinters
(http://coactivate.org/projects/snow-sprint-west-2011/project-home)
for making this happen!

cheers,
jon

PS We'll send another reminder or two to this list before mothballing
it.  Please feel free to unsubscribe here after you've resubscribed as
described above.

---------
Jon Stahl
Plone Foundation Board Member
jonstahl@...

------------------------------------------------------------------------------
The ultimate all-in-one performance toolkit: Intel(R) Parallel Studio XE:
Pinpoint memory and threading errors before they happen.
Find and fix more than 250 security defects in the development cycle.
Locate bottlenecks in serial and parallel code that limit performance.
http://p.sf.net/sfu/intel-dev2devfeb