summaryrefslogtreecommitdiffstats
path: root/www/zope29/pkg-plist
Commit message (Collapse)AuthorAgeFilesLines
* Upgrade to Zope 2.5.1nbm2002-05-081-7/+18
| | | | | PR: ports/37763 Submitted by: HAYASHI Yasushi <yasi@yasi.to>
* Implement the HotFix described atnbm2002-03-231-0/+4
| | | | | | | | | | | | | | | | http://www.zope.org/Products/Zope/Hotfix_2002-03-01/README.txt which says: ``The issue involves the checking of security for objects with proxy roles. The context of the owner user that created the object with proxy roles was not being taken into account when determining access to the object with proxy roles. This flaw could allow users defined in subfolders of a site with sufficient privileges to access objects at higher levels in the site that they would not normally be able to access.'' PR: 36103 Submitted by: HAYASHI Yasushi <yasi@yasi.to>
* Upgrade to 2.5.0 plus the security fix.nbm2002-02-051-131/+540
| | | | | PR: ports/34430 Submitted by: HAYASHI Yasushi <yasi@yasi.to>
* Upgrade to 2.4.2nbm2001-10-191-0/+8
|
* Upgrade to Zope 2.4.1.nbm2001-09-101-202/+214
|
* Acqusition context checking hotfixnbm2001-08-041-0/+4
| | | | | | | | | ``The issue involves an error in the '_check_context' method of the AccessControl.User.BasicUser class. The bug made it possible to access Zope objects via acquisition that a user would not otherwise have access to. This issue could allow users with enough internal knowledge of Zope to perform actions higher in the object hierarchy than they should be able to.''
* Upgrade to 2.4.0.vanilla2001-07-251-107/+429
| | | | Approved by: nbm
* Update port to version 2.3.3.olgeni2001-07-041-4/+0
| | | | Approved by: nbm
* Add missing @dirrm for Hotfix_2001_05_01.olgeni2001-05-271-0/+1
|
* Actually install the 2001-05-01 Hotfix.nbm2001-05-031-1/+3
|
* Update to Zope 2.3.2 + Hotfix 2001-05-01nbm2001-05-031-0/+18
|
* Upgrade to Zope 2.3.1!nbm2001-03-311-53/+153
|
* Apply Zope hotfix: Hotfix_2001-03-08olgeni2001-03-101-0/+4
| | | | | | | | | | | | From the Zope site: The issue involves an error in the 'aq_inContextOf' method of objects that support acquisition. A recent change to the access validation machinery made this bug begin to affect security restrictions. The bug, with the change to validation, made it possible to access Zope objects via acquisition that a user would not otherwise have access to. This issue could allow users with enough internal knowledge of Zope to perform actions higher in the object hierarchy than they should be able to.
* More plist and Makefile fixes.olgeni2001-03-081-5/+0
| | | | | | | | | | | | | | | | | | | * Removed "access" from pkg-plist, it contains password data that should be preserved (I forgot this last time!). * In the "do-install" target, leave the "access" file unchanged if it already exists. * Remove the pre-deinstall comment: Data.fs is already preserved by pkg_delete anyway. * In the "install" target, use temporary file Data.fs.preserve to avoid overwriting Data.fs. "make deinstall/install" can now be safely used to perform upgrades. * Don't leave .o files around anymore. Approved by: maintainer
* Miscellaneous fixes.olgeni2001-03-061-13/+26
| | | | | | | | | | | | | | | | | | | | | | | | | * Changed the python15 dependency to USE_PYTHON=yes * Replaced PYTHON15 with PYTHON_CMD from bsd.python.mk * Added SAPACHE_CONFDIR, like the other Sxxx variables, to be used in the PLIST. APACHE_CONFDIR now depends on SAPACHE_CONFDIR * Added APACHE_CONFDIR and WEBBASEDIR to PLIST_SUB * Removed temporary file Zope.cgi.orig * Removed .cvsignore from var/ * Added/removed some files to the PLIST * Used @unexec rmdir to remove shared directories from PLIST * Removed the line with "grep". I didn't understand how it was supposed to work, I guess it should have been something like "cmp -s ...", but Data.fs cannot be equal to Data.fs.in anyway, because Zope adds some things to it the first time it's started (automatically imported packages from filesystem). * Removed temporary files from var/ at deinstall time (*.tmp, *.lock, *.soc, *.pid) * Sometimes the inituser file did not exist at deinstall time, so I deleted it with @unexec. It won't be included by "make package". * Added the Hotfix_2001-02-23 directory (@dirrm) * Used variables from PLIST_SUB instead of www and etc/apache (@dirrm) Approved by: maintainer
* Apply a Zope hotfix, fixing a potential security problem.nbm2001-03-041-0/+3
| | | | | | | | | | | | | | | | | | | | | From the Zope hotfix: This hotfix addresses and important security issue that affects Zope versions up to and including Zope 2.3.1 b1. The issue is related to ZClasses in that a user with through-the-web scripting capabilities on a Zope site can view and assign class attributes to ZClasses, possibly allowing them to make inappropriate changes to ZClass instances. This patch also fixes problems in the ObjectManager, PropertyManager, and PropertySheet classes related to mutability of method return values which could be perceived as a security problem. We *highly* recommend that any Zope site running versions of Zope up to and including 2.3.1 b1 have this hotfix product installed to mitigate these issues if the site is accessible by untrusted users who have through-the-web scripting privileges.
* Upgrade to Zope 2.3.0. It requires the recent change to python15 fornbm2001-01-291-124/+379
| | | | the 'new' module.
* Update to Zope 2.2.5nbm2001-01-181-89/+70
|
* Upgrade to Zope 2.2.4, with 2000-12-08, 2000-12-15a, and 2000-12-18nbm2000-12-201-8/+34
| | | | | | | security hotfixes. All Zope users are encouraged to upgrade, or apply the hotfixes themselves.
* Add __init__.pyc's for the Hotfixes, since they seem to be created.nbm2000-11-031-0/+2
| | | | | | | Since this doesn't affect any functionality for port or packages users, I'll try avoid the PORTREVISION bump. Noticed by: bento
* Add two security hotfixes for Zope - more complex Zope internals stuffnbm2000-10-141-0/+6
| | | | | | which allows people who may edit DTML to gain higher privilege, and those who have higher privilege in some areas of the Zope tree to gain it in other areas.
* Upgrade to Zope 2.2.2nbm2000-09-191-0/+1
| | | | Also allow zope to be installed by non-root.
* Remove the zope data file if it is the same as installed.nbm2000-09-071-0/+1
|
* Update to Zope 2.2.1.nbm2000-09-061-2/+0
| | | | | | | | Zope shutdown bug fixed. Reported by: Marc Rassbach <marc@milestonerdl.com> Reported by: Jimmy Olgeni <olgeni@uli.it> Zope startup bug fixed (I think).
* Update to 2.2.1b1, since there is a minor security problem in anythingnbm2000-08-151-25/+261
| | | | beforehand.
* Update to version 2.1.6.steve2000-05-291-1096/+1112
| | | | | PR: 18444 Submitted by: Thomas Hentschel <thomas@hentschel.net>
* Initial import of zope version 2.0.0b5.steve1999-11-011-0/+1108
An object-based web application platform with database access. PR: 13324 Submitted by: Peter Cornelius <pcc@gmx.net>
OpenPOWER on IntegriCloud