diff options
| author | olgeni <olgeni@FreeBSD.org> | 2001-03-10 12:22:15 +0000 |
|---|---|---|
| committer | olgeni <olgeni@FreeBSD.org> | 2001-03-10 12:22:15 +0000 |
| commit | 655cfb181ce50c451a49ffac84b30fd4d4217c66 (patch) | |
| tree | c26af57853994b914c07b847e1bca94316bdea0c /www/zope211 | |
| parent | e4b3e74e18d37f7186950e0997d0fa60b2e9522a (diff) | |
| download | FreeBSD-ports-655cfb181ce50c451a49ffac84b30fd4d4217c66.zip FreeBSD-ports-655cfb181ce50c451a49ffac84b30fd4d4217c66.tar.gz | |
Apply Zope hotfix: Hotfix_2001-03-08
From the Zope site:
The issue involves an error in the 'aq_inContextOf' method of objects that
support acquisition. A recent change to the access validation machinery
made this bug begin to affect security restrictions. The bug, with the
change to validation, made it possible to access Zope objects via
acquisition that a user would not otherwise have access to. This issue
could allow users with enough internal knowledge of Zope to perform actions
higher in the object hierarchy than they should be able to.
Diffstat (limited to 'www/zope211')
| -rw-r--r-- | www/zope211/Makefile | 8 | ||||
| -rw-r--r-- | www/zope211/distinfo | 1 | ||||
| -rw-r--r-- | www/zope211/pkg-plist | 4 |
3 files changed, 10 insertions, 3 deletions
diff --git a/www/zope211/Makefile b/www/zope211/Makefile index 5bc11b3..a587d1d 100644 --- a/www/zope211/Makefile +++ b/www/zope211/Makefile @@ -7,14 +7,16 @@ PORTNAME= zope PORTVERSION= 2.3.0 -PORTREVISION= 1 +PORTREVISION= 2 CATEGORIES= www python MASTER_SITES= http://www.zope.org/Products/Zope/${PORTVERSION}/ \ - http://www.zope.org/Products/Zope/Hotfix_2001-02-23/ + http://www.zope.org/Products/Zope/Hotfix_2001-02-23/ \ + http://www.zope.org/Products/Zope/Hotfix_2001-03-08/ DISTNAME= Zope-${PORTVERSION}-src EXTRACT_SUFX= .tgz DISTFILES= ${DISTNAME}${EXTRACT_SUFX} \ - Hotfix_2001-02-23.tgz + Hotfix_2001-02-23.tgz \ + Hotfix_2001-03-08.tgz MAINTAINER= nbm@FreeBSD.org diff --git a/www/zope211/distinfo b/www/zope211/distinfo index a24b333..c8436ee 100644 --- a/www/zope211/distinfo +++ b/www/zope211/distinfo @@ -1,2 +1,3 @@ MD5 (zope/Zope-2.3.0-src.tgz) = ffd467bc9da04564af10452a4bb520d1 MD5 (zope/Hotfix_2001-02-23.tgz) = 9794180dd3d46e176cf150345f62e353 +MD5 (zope/Hotfix_2001-03-08.tgz) = 1c0798d79c0fdcbbd364270a9a45bd2b diff --git a/www/zope211/pkg-plist b/www/zope211/pkg-plist index 0351cf2..66d0c46 100644 --- a/www/zope211/pkg-plist +++ b/www/zope211/pkg-plist @@ -626,6 +626,9 @@ etc/rc.d/zope.sh %%ZOPEBASEDIR%%/lib/python/Products/Hotfix_2001-02-23/README.txt %%ZOPEBASEDIR%%/lib/python/Products/Hotfix_2001-02-23/__init__.py %%ZOPEBASEDIR%%/lib/python/Products/Hotfix_2001-02-23/__init__.pyc +%%ZOPEBASEDIR%%/lib/python/Products/Hotfix_2001-03-08/README.txt +%%ZOPEBASEDIR%%/lib/python/Products/Hotfix_2001-03-08/__init__.py +%%ZOPEBASEDIR%%/lib/python/Products/Hotfix_2001-03-08/__init__.pyc %%ZOPEBASEDIR%%/lib/python/Products/MIMETools/MIMETag.py %%ZOPEBASEDIR%%/lib/python/Products/MIMETools/MIMETag.pyc %%ZOPEBASEDIR%%/lib/python/Products/MIMETools/README.txt @@ -1599,6 +1602,7 @@ etc/rc.d/zope.sh @dirrm %%ZOPEBASEDIR%%/lib/python/Products/MailHost @dirrm %%ZOPEBASEDIR%%/lib/python/Products/MIMETools @dirrm %%ZOPEBASEDIR%%/lib/python/Products/Hotfix_2001-02-23 +@dirrm %%ZOPEBASEDIR%%/lib/python/Products/Hotfix_2001-03-08 @dirrm %%ZOPEBASEDIR%%/lib/python/Products/ExternalMethod/www @dirrm %%ZOPEBASEDIR%%/lib/python/Products/ExternalMethod/help @dirrm %%ZOPEBASEDIR%%/lib/python/Products/ExternalMethod/dtml |
