diff options
| author | Jimmy Olgeni <olgeni@FreeBSD.org> | 2001-03-10 12:22:15 +0000 |
|---|---|---|
| committer | Jimmy Olgeni <olgeni@FreeBSD.org> | 2001-03-10 12:22:15 +0000 |
| commit | 32bd499f1c448581b1c791bbc1e602f6e0ea65e4 (patch) | |
| tree | 135d4f313f27a39a4575e1c3616f7db768c1087b /www/zope28/pkg-plist | |
| parent | 04b126abb694598e36dfd47f695d563a751c7ab7 (diff) | |
| download | ports-32bd499f1c448581b1c791bbc1e602f6e0ea65e4.tar.gz ports-32bd499f1c448581b1c791bbc1e602f6e0ea65e4.zip | |
Apply Zope hotfix: Hotfix_2001-03-08
From the Zope site:
The issue involves an error in the 'aq_inContextOf' method of objects that
support acquisition. A recent change to the access validation machinery
made this bug begin to affect security restrictions. The bug, with the
change to validation, made it possible to access Zope objects via
acquisition that a user would not otherwise have access to. This issue
could allow users with enough internal knowledge of Zope to perform actions
higher in the object hierarchy than they should be able to.
Notes
Notes:
svn path=/head/; revision=39416
Diffstat (limited to 'www/zope28/pkg-plist')
| -rw-r--r-- | www/zope28/pkg-plist | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/www/zope28/pkg-plist b/www/zope28/pkg-plist index 0351cf252693..66d0c46e8597 100644 --- a/www/zope28/pkg-plist +++ b/www/zope28/pkg-plist @@ -626,6 +626,9 @@ etc/rc.d/zope.sh %%ZOPEBASEDIR%%/lib/python/Products/Hotfix_2001-02-23/README.txt %%ZOPEBASEDIR%%/lib/python/Products/Hotfix_2001-02-23/__init__.py %%ZOPEBASEDIR%%/lib/python/Products/Hotfix_2001-02-23/__init__.pyc +%%ZOPEBASEDIR%%/lib/python/Products/Hotfix_2001-03-08/README.txt +%%ZOPEBASEDIR%%/lib/python/Products/Hotfix_2001-03-08/__init__.py +%%ZOPEBASEDIR%%/lib/python/Products/Hotfix_2001-03-08/__init__.pyc %%ZOPEBASEDIR%%/lib/python/Products/MIMETools/MIMETag.py %%ZOPEBASEDIR%%/lib/python/Products/MIMETools/MIMETag.pyc %%ZOPEBASEDIR%%/lib/python/Products/MIMETools/README.txt @@ -1599,6 +1602,7 @@ etc/rc.d/zope.sh @dirrm %%ZOPEBASEDIR%%/lib/python/Products/MailHost @dirrm %%ZOPEBASEDIR%%/lib/python/Products/MIMETools @dirrm %%ZOPEBASEDIR%%/lib/python/Products/Hotfix_2001-02-23 +@dirrm %%ZOPEBASEDIR%%/lib/python/Products/Hotfix_2001-03-08 @dirrm %%ZOPEBASEDIR%%/lib/python/Products/ExternalMethod/www @dirrm %%ZOPEBASEDIR%%/lib/python/Products/ExternalMethod/help @dirrm %%ZOPEBASEDIR%%/lib/python/Products/ExternalMethod/dtml |