From 434868fb60e1880fc8b6c23af6a728ae1f00b416 Mon Sep 17 00:00:00 2001 From: Neil Blakey-Milner Date: Sat, 4 Aug 2001 17:29:00 +0000 Subject: Acqusition context checking hotfix ``The issue involves an error in the '_check_context' method of the AccessControl.User.BasicUser class. The bug made it possible to access Zope objects via acquisition that a user would not otherwise have access to. This issue could allow users with enough internal knowledge of Zope to perform actions higher in the object hierarchy than they should be able to.'' --- www/zope213/pkg-plist | 4 ++++ 1 file changed, 4 insertions(+) (limited to 'www/zope213/pkg-plist') diff --git a/www/zope213/pkg-plist b/www/zope213/pkg-plist index d6bf65c31215..52e83f3abee0 100644 --- a/www/zope213/pkg-plist +++ b/www/zope213/pkg-plist @@ -810,6 +810,9 @@ etc/rc.d/zope.sh %%ZOPEBASEDIR%%/lib/python/Products/ExternalMethod/help/ExternalMethod.pyc %%ZOPEBASEDIR%%/lib/python/Products/ExternalMethod/version.txt %%ZOPEBASEDIR%%/lib/python/Products/ExternalMethod/www/function.gif +%%ZOPEBASEDIR%%/lib/python/Products/Hotfix_2001_08_04/README.txt +%%ZOPEBASEDIR%%/lib/python/Products/Hotfix_2001_08_04/__init__.py +%%ZOPEBASEDIR%%/lib/python/Products/Hotfix_2001_08_04/__init__.pyc %%ZOPEBASEDIR%%/lib/python/Products/MIMETools/MIMETag.py %%ZOPEBASEDIR%%/lib/python/Products/MIMETools/MIMETag.pyc %%ZOPEBASEDIR%%/lib/python/Products/MIMETools/README.txt @@ -2021,6 +2024,7 @@ etc/rc.d/zope.sh @dirrm %%ZOPEBASEDIR%%/lib/python/Products/MailHost/dtml @dirrm %%ZOPEBASEDIR%%/lib/python/Products/MailHost @dirrm %%ZOPEBASEDIR%%/lib/python/Products/MIMETools +@dirrm %%ZOPEBASEDIR%%/lib/python/Products/Hotfix_2001_08_04 @dirrm %%ZOPEBASEDIR%%/lib/python/Products/ExternalMethod/www @dirrm %%ZOPEBASEDIR%%/lib/python/Products/ExternalMethod/help @dirrm %%ZOPEBASEDIR%%/lib/python/Products/ExternalMethod/dtml -- cgit v1.2.3