From c32437a2576660c179ea613c015d8b5b25133885 Mon Sep 17 00:00:00 2001 From: nbm Date: Sun, 4 Mar 2001 10:32:18 +0000 Subject: Apply a Zope hotfix, fixing a potential security problem. From the Zope hotfix: This hotfix addresses and important security issue that affects Zope versions up to and including Zope 2.3.1 b1. The issue is related to ZClasses in that a user with through-the-web scripting capabilities on a Zope site can view and assign class attributes to ZClasses, possibly allowing them to make inappropriate changes to ZClass instances. This patch also fixes problems in the ObjectManager, PropertyManager, and PropertySheet classes related to mutability of method return values which could be perceived as a security problem. We *highly* recommend that any Zope site running versions of Zope up to and including 2.3.1 b1 have this hotfix product installed to mitigate these issues if the site is accessible by untrusted users who have through-the-web scripting privileges. --- www/zope210/distinfo | 1 + 1 file changed, 1 insertion(+) (limited to 'www/zope210/distinfo') diff --git a/www/zope210/distinfo b/www/zope210/distinfo index ba0860d..a24b333 100644 --- a/www/zope210/distinfo +++ b/www/zope210/distinfo @@ -1 +1,2 @@ MD5 (zope/Zope-2.3.0-src.tgz) = ffd467bc9da04564af10452a4bb520d1 +MD5 (zope/Hotfix_2001-02-23.tgz) = 9794180dd3d46e176cf150345f62e353 -- cgit v1.1