From 32bd499f1c448581b1c791bbc1e602f6e0ea65e4 Mon Sep 17 00:00:00 2001 From: Jimmy Olgeni Date: Sat, 10 Mar 2001 12:22:15 +0000 Subject: Apply Zope hotfix: Hotfix_2001-03-08 From the Zope site: The issue involves an error in the 'aq_inContextOf' method of objects that support acquisition. A recent change to the access validation machinery made this bug begin to affect security restrictions. The bug, with the change to validation, made it possible to access Zope objects via acquisition that a user would not otherwise have access to. This issue could allow users with enough internal knowledge of Zope to perform actions higher in the object hierarchy than they should be able to. --- www/zope29/pkg-plist | 4 ++++ 1 file changed, 4 insertions(+) (limited to 'www/zope29/pkg-plist') diff --git a/www/zope29/pkg-plist b/www/zope29/pkg-plist index 0351cf252693..66d0c46e8597 100644 --- a/www/zope29/pkg-plist +++ b/www/zope29/pkg-plist @@ -626,6 +626,9 @@ etc/rc.d/zope.sh %%ZOPEBASEDIR%%/lib/python/Products/Hotfix_2001-02-23/README.txt %%ZOPEBASEDIR%%/lib/python/Products/Hotfix_2001-02-23/__init__.py %%ZOPEBASEDIR%%/lib/python/Products/Hotfix_2001-02-23/__init__.pyc +%%ZOPEBASEDIR%%/lib/python/Products/Hotfix_2001-03-08/README.txt +%%ZOPEBASEDIR%%/lib/python/Products/Hotfix_2001-03-08/__init__.py +%%ZOPEBASEDIR%%/lib/python/Products/Hotfix_2001-03-08/__init__.pyc %%ZOPEBASEDIR%%/lib/python/Products/MIMETools/MIMETag.py %%ZOPEBASEDIR%%/lib/python/Products/MIMETools/MIMETag.pyc %%ZOPEBASEDIR%%/lib/python/Products/MIMETools/README.txt @@ -1599,6 +1602,7 @@ etc/rc.d/zope.sh @dirrm %%ZOPEBASEDIR%%/lib/python/Products/MailHost @dirrm %%ZOPEBASEDIR%%/lib/python/Products/MIMETools @dirrm %%ZOPEBASEDIR%%/lib/python/Products/Hotfix_2001-02-23 +@dirrm %%ZOPEBASEDIR%%/lib/python/Products/Hotfix_2001-03-08 @dirrm %%ZOPEBASEDIR%%/lib/python/Products/ExternalMethod/www @dirrm %%ZOPEBASEDIR%%/lib/python/Products/ExternalMethod/help @dirrm %%ZOPEBASEDIR%%/lib/python/Products/ExternalMethod/dtml -- cgit v1.2.3