From 5aaf8bc98b8371798f0fc70e0ac133da6af5e2dd Mon Sep 17 00:00:00 2001 From: Neil Blakey-Milner Date: Sun, 4 Mar 2001 10:32:18 +0000 Subject: Apply a Zope hotfix, fixing a potential security problem. From the Zope hotfix: This hotfix addresses and important security issue that affects Zope versions up to and including Zope 2.3.1 b1. The issue is related to ZClasses in that a user with through-the-web scripting capabilities on a Zope site can view and assign class attributes to ZClasses, possibly allowing them to make inappropriate changes to ZClass instances. This patch also fixes problems in the ObjectManager, PropertyManager, and PropertySheet classes related to mutability of method return values which could be perceived as a security problem. We *highly* recommend that any Zope site running versions of Zope up to and including 2.3.1 b1 have this hotfix product installed to mitigate these issues if the site is accessible by untrusted users who have through-the-web scripting privileges. --- www/zope211/pkg-plist | 3 +++ 1 file changed, 3 insertions(+) (limited to 'www/zope211/pkg-plist') diff --git a/www/zope211/pkg-plist b/www/zope211/pkg-plist index 8ef59c54606a..68e3697e5920 100644 --- a/www/zope211/pkg-plist +++ b/www/zope211/pkg-plist @@ -616,6 +616,9 @@ etc/rc.d/zope.sh %%ZOPEBASEDIR%%/lib/python/Products/ExternalMethod/help/ExternalMethod.pyc %%ZOPEBASEDIR%%/lib/python/Products/ExternalMethod/version.txt %%ZOPEBASEDIR%%/lib/python/Products/ExternalMethod/www/function.gif +%%ZOPEBASEDIR%%/lib/python/Products/Hotfix_2001-02-23/README.txt +%%ZOPEBASEDIR%%/lib/python/Products/Hotfix_2001-02-23/__init__.py +%%ZOPEBASEDIR%%/lib/python/Products/Hotfix_2001-02-23/__init__.pyc %%ZOPEBASEDIR%%/lib/python/Products/MIMETools/MIMETag.py %%ZOPEBASEDIR%%/lib/python/Products/MIMETools/MIMETag.pyc %%ZOPEBASEDIR%%/lib/python/Products/MIMETools/README.txt -- cgit v1.2.3