From 9092d6a0dbd96f573ba3d2c3920236116eb9c793 Mon Sep 17 00:00:00 2001
From: nbm <nbm@FreeBSD.org>
Date: Sat, 4 Aug 2001 17:29:00 +0000
Subject: Acqusition context checking hotfix

``The issue involves an error in the '_check_context' method of the
AccessControl.User.BasicUser class. The bug made it possible to access
Zope objects via acquisition that a user would not otherwise have access
to. This issue could allow users with enough internal knowledge of Zope
to perform actions higher in the object hierarchy than they should be
able to.''
---
 www/zope211/Makefile  | 12 +++++++-----
 www/zope211/distinfo  |  1 +
 www/zope211/pkg-plist |  4 ++++
 3 files changed, 12 insertions(+), 5 deletions(-)

(limited to 'www/zope211')

diff --git a/www/zope211/Makefile b/www/zope211/Makefile
index 01b6ffc..903b9af 100644
--- a/www/zope211/Makefile
+++ b/www/zope211/Makefile
@@ -7,11 +7,13 @@
 
 PORTNAME=	zope
 PORTVERSION=	2.4.0
-CATEGORIES=	www python
-MASTER_SITES=	http://www.zope.org/Products/Zope/${PORTVERSION}/
+PORTREVISION=	1
+CATEGORIES=	www python zope
+MASTER_SITES=	http://www.zope.org/Products/Zope/${PORTVERSION}/ \
+		http://www.zope.org/Products/Zope/Hotfix_2001-08-04/
 DISTNAME=	Zope-${PORTVERSION}-src
-EXTRACT_SUFX=	.tgz
-DISTFILES=	${DISTNAME}${EXTRACT_SUFX}
+DISTFILES=	${DISTNAME}.tgz \
+		Hotfix_2001_08_04.tgz
 
 MAINTAINER=	nbm@FreeBSD.org
 
@@ -62,7 +64,7 @@ do-install:
 	@${ECHO} "===>   Please be patient, some builds need their time."
 	@${ECHO} "===>   Copying..."
 	@${CP} -Rp ${WRKSRC}/* ${ZOPEBASEDIR}/
-	@${CP} -Rp ${WRKSRC}/lib ${ZOPEBASEDIR}/
+	@${CP} -Rp ${WRKDIR}/lib ${ZOPEBASEDIR}/
 	@#
 	@${CHMOD} -R u+w ${ZOPEBASEDIR}
 	@(cd ${ZOPEBASEDIR} && ${PYTHON_CMD} w_pcgi.py)
diff --git a/www/zope211/distinfo b/www/zope211/distinfo
index fced039..b8a73d1 100644
--- a/www/zope211/distinfo
+++ b/www/zope211/distinfo
@@ -1 +1,2 @@
 MD5 (zope/Zope-2.4.0-src.tgz) = 1a41e096a80411bccf61cd862bc3cc20
+MD5 (zope/Hotfix_2001_08_04.tgz) = c060bf5f1a22b6d93ea3314cae9ea0cc
diff --git a/www/zope211/pkg-plist b/www/zope211/pkg-plist
index d6bf65c..52e83f3 100644
--- a/www/zope211/pkg-plist
+++ b/www/zope211/pkg-plist
@@ -810,6 +810,9 @@ etc/rc.d/zope.sh
 %%ZOPEBASEDIR%%/lib/python/Products/ExternalMethod/help/ExternalMethod.pyc
 %%ZOPEBASEDIR%%/lib/python/Products/ExternalMethod/version.txt
 %%ZOPEBASEDIR%%/lib/python/Products/ExternalMethod/www/function.gif
+%%ZOPEBASEDIR%%/lib/python/Products/Hotfix_2001_08_04/README.txt
+%%ZOPEBASEDIR%%/lib/python/Products/Hotfix_2001_08_04/__init__.py
+%%ZOPEBASEDIR%%/lib/python/Products/Hotfix_2001_08_04/__init__.pyc
 %%ZOPEBASEDIR%%/lib/python/Products/MIMETools/MIMETag.py
 %%ZOPEBASEDIR%%/lib/python/Products/MIMETools/MIMETag.pyc
 %%ZOPEBASEDIR%%/lib/python/Products/MIMETools/README.txt
@@ -2021,6 +2024,7 @@ etc/rc.d/zope.sh
 @dirrm %%ZOPEBASEDIR%%/lib/python/Products/MailHost/dtml
 @dirrm %%ZOPEBASEDIR%%/lib/python/Products/MailHost
 @dirrm %%ZOPEBASEDIR%%/lib/python/Products/MIMETools
+@dirrm %%ZOPEBASEDIR%%/lib/python/Products/Hotfix_2001_08_04
 @dirrm %%ZOPEBASEDIR%%/lib/python/Products/ExternalMethod/www
 @dirrm %%ZOPEBASEDIR%%/lib/python/Products/ExternalMethod/help
 @dirrm %%ZOPEBASEDIR%%/lib/python/Products/ExternalMethod/dtml
-- 
cgit v1.1