aboutsummaryrefslogtreecommitdiffstats
path: root/www/zope28
diff options
context:
space:
mode:
authorolgeni <olgeni@FreeBSD.org>2001-03-10 20:22:15 +0800
committerolgeni <olgeni@FreeBSD.org>2001-03-10 20:22:15 +0800
commit655cfb181ce50c451a49ffac84b30fd4d4217c66 (patch)
treec26af57853994b914c07b847e1bca94316bdea0c /www/zope28
parente4b3e74e18d37f7186950e0997d0fa60b2e9522a (diff)
downloadfreebsd-ports-gnome-655cfb181ce50c451a49ffac84b30fd4d4217c66.tar.gz
freebsd-ports-gnome-655cfb181ce50c451a49ffac84b30fd4d4217c66.tar.zst
freebsd-ports-gnome-655cfb181ce50c451a49ffac84b30fd4d4217c66.zip
Apply Zope hotfix: Hotfix_2001-03-08
From the Zope site: The issue involves an error in the 'aq_inContextOf' method of objects that support acquisition. A recent change to the access validation machinery made this bug begin to affect security restrictions. The bug, with the change to validation, made it possible to access Zope objects via acquisition that a user would not otherwise have access to. This issue could allow users with enough internal knowledge of Zope to perform actions higher in the object hierarchy than they should be able to.
Diffstat (limited to 'www/zope28')
-rw-r--r--www/zope28/Makefile8
-rw-r--r--www/zope28/distinfo1
-rw-r--r--www/zope28/pkg-plist4
3 files changed, 10 insertions, 3 deletions
diff --git a/www/zope28/Makefile b/www/zope28/Makefile
index 5bc11b385074..a587d1d73b12 100644
--- a/www/zope28/Makefile
+++ b/www/zope28/Makefile
@@ -7,14 +7,16 @@
PORTNAME= zope
PORTVERSION= 2.3.0
-PORTREVISION= 1
+PORTREVISION= 2
CATEGORIES= www python
MASTER_SITES= http://www.zope.org/Products/Zope/${PORTVERSION}/ \
- http://www.zope.org/Products/Zope/Hotfix_2001-02-23/
+ http://www.zope.org/Products/Zope/Hotfix_2001-02-23/ \
+ http://www.zope.org/Products/Zope/Hotfix_2001-03-08/
DISTNAME= Zope-${PORTVERSION}-src
EXTRACT_SUFX= .tgz
DISTFILES= ${DISTNAME}${EXTRACT_SUFX} \
- Hotfix_2001-02-23.tgz
+ Hotfix_2001-02-23.tgz \
+ Hotfix_2001-03-08.tgz
MAINTAINER= nbm@FreeBSD.org
diff --git a/www/zope28/distinfo b/www/zope28/distinfo
index a24b333e3e75..c8436eec39c8 100644
--- a/www/zope28/distinfo
+++ b/www/zope28/distinfo
@@ -1,2 +1,3 @@
MD5 (zope/Zope-2.3.0-src.tgz) = ffd467bc9da04564af10452a4bb520d1
MD5 (zope/Hotfix_2001-02-23.tgz) = 9794180dd3d46e176cf150345f62e353
+MD5 (zope/Hotfix_2001-03-08.tgz) = 1c0798d79c0fdcbbd364270a9a45bd2b
diff --git a/www/zope28/pkg-plist b/www/zope28/pkg-plist
index 0351cf252693..66d0c46e8597 100644
--- a/www/zope28/pkg-plist
+++ b/www/zope28/pkg-plist
@@ -626,6 +626,9 @@ etc/rc.d/zope.sh
%%ZOPEBASEDIR%%/lib/python/Products/Hotfix_2001-02-23/README.txt
%%ZOPEBASEDIR%%/lib/python/Products/Hotfix_2001-02-23/__init__.py
%%ZOPEBASEDIR%%/lib/python/Products/Hotfix_2001-02-23/__init__.pyc
+%%ZOPEBASEDIR%%/lib/python/Products/Hotfix_2001-03-08/README.txt
+%%ZOPEBASEDIR%%/lib/python/Products/Hotfix_2001-03-08/__init__.py
+%%ZOPEBASEDIR%%/lib/python/Products/Hotfix_2001-03-08/__init__.pyc
%%ZOPEBASEDIR%%/lib/python/Products/MIMETools/MIMETag.py
%%ZOPEBASEDIR%%/lib/python/Products/MIMETools/MIMETag.pyc
%%ZOPEBASEDIR%%/lib/python/Products/MIMETools/README.txt
@@ -1599,6 +1602,7 @@ etc/rc.d/zope.sh
@dirrm %%ZOPEBASEDIR%%/lib/python/Products/MailHost
@dirrm %%ZOPEBASEDIR%%/lib/python/Products/MIMETools
@dirrm %%ZOPEBASEDIR%%/lib/python/Products/Hotfix_2001-02-23
+@dirrm %%ZOPEBASEDIR%%/lib/python/Products/Hotfix_2001-03-08
@dirrm %%ZOPEBASEDIR%%/lib/python/Products/ExternalMethod/www
@dirrm %%ZOPEBASEDIR%%/lib/python/Products/ExternalMethod/help
@dirrm %%ZOPEBASEDIR%%/lib/python/Products/ExternalMethod/dtml