diff options
author | Neil Blakey-Milner <nbm@FreeBSD.org> | 2001-08-04 17:29:00 +0000 |
---|---|---|
committer | Neil Blakey-Milner <nbm@FreeBSD.org> | 2001-08-04 17:29:00 +0000 |
commit | 434868fb60e1880fc8b6c23af6a728ae1f00b416 (patch) | |
tree | 2be55f9d163e571b20880964bb1473e34d58e787 /www/zope28/distinfo | |
parent | a5d858f6e1b7a7ae4f3419e6d04cdbb19ee98441 (diff) | |
download | ports-434868fb60e1880fc8b6c23af6a728ae1f00b416.tar.gz ports-434868fb60e1880fc8b6c23af6a728ae1f00b416.zip |
Acqusition context checking hotfix
``The issue involves an error in the '_check_context' method of the
AccessControl.User.BasicUser class. The bug made it possible to access
Zope objects via acquisition that a user would not otherwise have access
to. This issue could allow users with enough internal knowledge of Zope
to perform actions higher in the object hierarchy than they should be
able to.''
Notes
Notes:
svn path=/head/; revision=45808
Diffstat (limited to 'www/zope28/distinfo')
-rw-r--r-- | www/zope28/distinfo | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/www/zope28/distinfo b/www/zope28/distinfo index fced039a3dc7..b8a73d1a5fc4 100644 --- a/www/zope28/distinfo +++ b/www/zope28/distinfo @@ -1 +1,2 @@ MD5 (zope/Zope-2.4.0-src.tgz) = 1a41e096a80411bccf61cd862bc3cc20 +MD5 (zope/Hotfix_2001_08_04.tgz) = c060bf5f1a22b6d93ea3314cae9ea0cc |