summaryrefslogtreecommitdiffstats
path: root/www/zope211
diff options
context:
space:
mode:
authornbm <nbm@FreeBSD.org>2001-08-04 17:29:00 +0000
committernbm <nbm@FreeBSD.org>2001-08-04 17:29:00 +0000
commit9092d6a0dbd96f573ba3d2c3920236116eb9c793 (patch)
treed80d78284701daf7828319a1fcde54d7d6f77568 /www/zope211
parent8126d8fc167a3c6ae257f9b59f0c548f1be7ffdb (diff)
downloadFreeBSD-ports-9092d6a0dbd96f573ba3d2c3920236116eb9c793.zip
FreeBSD-ports-9092d6a0dbd96f573ba3d2c3920236116eb9c793.tar.gz
Acqusition context checking hotfix
``The issue involves an error in the '_check_context' method of the AccessControl.User.BasicUser class. The bug made it possible to access Zope objects via acquisition that a user would not otherwise have access to. This issue could allow users with enough internal knowledge of Zope to perform actions higher in the object hierarchy than they should be able to.''
Diffstat (limited to 'www/zope211')
-rw-r--r--www/zope211/Makefile12
-rw-r--r--www/zope211/distinfo1
-rw-r--r--www/zope211/pkg-plist4
3 files changed, 12 insertions, 5 deletions
diff --git a/www/zope211/Makefile b/www/zope211/Makefile
index 01b6ffc..903b9af 100644
--- a/www/zope211/Makefile
+++ b/www/zope211/Makefile
@@ -7,11 +7,13 @@
PORTNAME= zope
PORTVERSION= 2.4.0
-CATEGORIES= www python
-MASTER_SITES= http://www.zope.org/Products/Zope/${PORTVERSION}/
+PORTREVISION= 1
+CATEGORIES= www python zope
+MASTER_SITES= http://www.zope.org/Products/Zope/${PORTVERSION}/ \
+ http://www.zope.org/Products/Zope/Hotfix_2001-08-04/
DISTNAME= Zope-${PORTVERSION}-src
-EXTRACT_SUFX= .tgz
-DISTFILES= ${DISTNAME}${EXTRACT_SUFX}
+DISTFILES= ${DISTNAME}.tgz \
+ Hotfix_2001_08_04.tgz
MAINTAINER= nbm@FreeBSD.org
@@ -62,7 +64,7 @@ do-install:
@${ECHO} "===> Please be patient, some builds need their time."
@${ECHO} "===> Copying..."
@${CP} -Rp ${WRKSRC}/* ${ZOPEBASEDIR}/
- @${CP} -Rp ${WRKSRC}/lib ${ZOPEBASEDIR}/
+ @${CP} -Rp ${WRKDIR}/lib ${ZOPEBASEDIR}/
@#
@${CHMOD} -R u+w ${ZOPEBASEDIR}
@(cd ${ZOPEBASEDIR} && ${PYTHON_CMD} w_pcgi.py)
diff --git a/www/zope211/distinfo b/www/zope211/distinfo
index fced039..b8a73d1 100644
--- a/www/zope211/distinfo
+++ b/www/zope211/distinfo
@@ -1 +1,2 @@
MD5 (zope/Zope-2.4.0-src.tgz) = 1a41e096a80411bccf61cd862bc3cc20
+MD5 (zope/Hotfix_2001_08_04.tgz) = c060bf5f1a22b6d93ea3314cae9ea0cc
diff --git a/www/zope211/pkg-plist b/www/zope211/pkg-plist
index d6bf65c..52e83f3 100644
--- a/www/zope211/pkg-plist
+++ b/www/zope211/pkg-plist
@@ -810,6 +810,9 @@ etc/rc.d/zope.sh
%%ZOPEBASEDIR%%/lib/python/Products/ExternalMethod/help/ExternalMethod.pyc
%%ZOPEBASEDIR%%/lib/python/Products/ExternalMethod/version.txt
%%ZOPEBASEDIR%%/lib/python/Products/ExternalMethod/www/function.gif
+%%ZOPEBASEDIR%%/lib/python/Products/Hotfix_2001_08_04/README.txt
+%%ZOPEBASEDIR%%/lib/python/Products/Hotfix_2001_08_04/__init__.py
+%%ZOPEBASEDIR%%/lib/python/Products/Hotfix_2001_08_04/__init__.pyc
%%ZOPEBASEDIR%%/lib/python/Products/MIMETools/MIMETag.py
%%ZOPEBASEDIR%%/lib/python/Products/MIMETools/MIMETag.pyc
%%ZOPEBASEDIR%%/lib/python/Products/MIMETools/README.txt
@@ -2021,6 +2024,7 @@ etc/rc.d/zope.sh
@dirrm %%ZOPEBASEDIR%%/lib/python/Products/MailHost/dtml
@dirrm %%ZOPEBASEDIR%%/lib/python/Products/MailHost
@dirrm %%ZOPEBASEDIR%%/lib/python/Products/MIMETools
+@dirrm %%ZOPEBASEDIR%%/lib/python/Products/Hotfix_2001_08_04
@dirrm %%ZOPEBASEDIR%%/lib/python/Products/ExternalMethod/www
@dirrm %%ZOPEBASEDIR%%/lib/python/Products/ExternalMethod/help
@dirrm %%ZOPEBASEDIR%%/lib/python/Products/ExternalMethod/dtml
OpenPOWER on IntegriCloud