4.x: Update AccessControl to version 4.4 to mitigate a security pro…

…blem. (#1149)
zopefoundation · Sep 4, 2023 · 785335e · 785335e
1 parent 403d5de
commit 785335e
Show file tree

Hide file tree

Showing 4 changed files with 8 additions and 4 deletions.
diff --git a/CHANGES.rst b/CHANGES.rst
@@ -10,7 +10,11 @@ https://zope.readthedocs.io/en/2.13/CHANGES.html
 4.8.9 (unreleased)
 ------------------
 
-- Update ``RestrictedPython`` to 5.4 to mitigate a security issue.
+- Update ``RestrictedPython`` to version 5.4 to mitigate a security issue.
+  (CVE-2023-41039)
+
+- Update ``AccessControl`` to version 4.4 to mitigate a security problem.
+  (CVE-2023-41050)
 
 
 4.8.8 (2023-06-20)

diff --git a/constraints.txt b/constraints.txt
@@ -1,4 +1,4 @@
-AccessControl==4.3
+AccessControl==4.4
 Acquisition==4.13
 AuthEncoding==4.3
 BTrees==4.11.3

diff --git a/requirements-full.txt b/requirements-full.txt
@@ -1,5 +1,5 @@
 Zope==<5
-AccessControl==4.3
+AccessControl==4.4
 Acquisition==4.13
 AuthEncoding==4.3
 BTrees==4.11.3

diff --git a/versions-prod.cfg b/versions-prod.cfg
@@ -5,7 +5,7 @@
 Zope = < 5
 Zope2 = 4.0
 # AccessControl 5+ no longer supports Zope 4.
-AccessControl = 4.3
+AccessControl = 4.4
 Acquisition = 4.13
 AuthEncoding = 4.3
 BTrees = 4.11.3