Acqusition context checking hotfix

``The issue involves an error in the '_check_context' method of the
AccessControl.User.BasicUser class. The bug made it possible to access
Zope objects via acquisition that a user would not otherwise have access
to. This issue could allow users with enough internal knowledge of Zope
to perform actions higher in the object hierarchy than they should be
able to.''
This commit is contained in:
Neil Blakey-Milner 2001-08-04 17:29:00 +00:00
parent a5d858f6e1
commit 434868fb60
Notes: svn2git 2021-03-31 03:12:20 +00:00
svn path=/head/; revision=45808
18 changed files with 72 additions and 30 deletions

View File

@ -7,11 +7,13 @@
PORTNAME= zope
PORTVERSION= 2.4.0
CATEGORIES= www python
MASTER_SITES= http://www.zope.org/Products/Zope/${PORTVERSION}/
PORTREVISION= 1
CATEGORIES= www python zope
MASTER_SITES= http://www.zope.org/Products/Zope/${PORTVERSION}/ \
http://www.zope.org/Products/Zope/Hotfix_2001-08-04/
DISTNAME= Zope-${PORTVERSION}-src
EXTRACT_SUFX= .tgz
DISTFILES= ${DISTNAME}${EXTRACT_SUFX}
DISTFILES= ${DISTNAME}.tgz \
Hotfix_2001_08_04.tgz
MAINTAINER= nbm@FreeBSD.org
@ -62,7 +64,7 @@ do-install:
@${ECHO} "===> Please be patient, some builds need their time."
@${ECHO} "===> Copying..."
@${CP} -Rp ${WRKSRC}/* ${ZOPEBASEDIR}/
@${CP} -Rp ${WRKSRC}/lib ${ZOPEBASEDIR}/
@${CP} -Rp ${WRKDIR}/lib ${ZOPEBASEDIR}/
@#
@${CHMOD} -R u+w ${ZOPEBASEDIR}
@(cd ${ZOPEBASEDIR} && ${PYTHON_CMD} w_pcgi.py)

View File

@ -1 +1,2 @@
MD5 (zope/Zope-2.4.0-src.tgz) = 1a41e096a80411bccf61cd862bc3cc20
MD5 (zope/Hotfix_2001_08_04.tgz) = c060bf5f1a22b6d93ea3314cae9ea0cc

View File

@ -810,6 +810,9 @@ etc/rc.d/zope.sh
%%ZOPEBASEDIR%%/lib/python/Products/ExternalMethod/help/ExternalMethod.pyc
%%ZOPEBASEDIR%%/lib/python/Products/ExternalMethod/version.txt
%%ZOPEBASEDIR%%/lib/python/Products/ExternalMethod/www/function.gif
%%ZOPEBASEDIR%%/lib/python/Products/Hotfix_2001_08_04/README.txt
%%ZOPEBASEDIR%%/lib/python/Products/Hotfix_2001_08_04/__init__.py
%%ZOPEBASEDIR%%/lib/python/Products/Hotfix_2001_08_04/__init__.pyc
%%ZOPEBASEDIR%%/lib/python/Products/MIMETools/MIMETag.py
%%ZOPEBASEDIR%%/lib/python/Products/MIMETools/MIMETag.pyc
%%ZOPEBASEDIR%%/lib/python/Products/MIMETools/README.txt
@ -2021,6 +2024,7 @@ etc/rc.d/zope.sh
@dirrm %%ZOPEBASEDIR%%/lib/python/Products/MailHost/dtml
@dirrm %%ZOPEBASEDIR%%/lib/python/Products/MailHost
@dirrm %%ZOPEBASEDIR%%/lib/python/Products/MIMETools
@dirrm %%ZOPEBASEDIR%%/lib/python/Products/Hotfix_2001_08_04
@dirrm %%ZOPEBASEDIR%%/lib/python/Products/ExternalMethod/www
@dirrm %%ZOPEBASEDIR%%/lib/python/Products/ExternalMethod/help
@dirrm %%ZOPEBASEDIR%%/lib/python/Products/ExternalMethod/dtml

View File

@ -7,11 +7,13 @@
PORTNAME= zope
PORTVERSION= 2.4.0
CATEGORIES= www python
MASTER_SITES= http://www.zope.org/Products/Zope/${PORTVERSION}/
PORTREVISION= 1
CATEGORIES= www python zope
MASTER_SITES= http://www.zope.org/Products/Zope/${PORTVERSION}/ \
http://www.zope.org/Products/Zope/Hotfix_2001-08-04/
DISTNAME= Zope-${PORTVERSION}-src
EXTRACT_SUFX= .tgz
DISTFILES= ${DISTNAME}${EXTRACT_SUFX}
DISTFILES= ${DISTNAME}.tgz \
Hotfix_2001_08_04.tgz
MAINTAINER= nbm@FreeBSD.org
@ -62,7 +64,7 @@ do-install:
@${ECHO} "===> Please be patient, some builds need their time."
@${ECHO} "===> Copying..."
@${CP} -Rp ${WRKSRC}/* ${ZOPEBASEDIR}/
@${CP} -Rp ${WRKSRC}/lib ${ZOPEBASEDIR}/
@${CP} -Rp ${WRKDIR}/lib ${ZOPEBASEDIR}/
@#
@${CHMOD} -R u+w ${ZOPEBASEDIR}
@(cd ${ZOPEBASEDIR} && ${PYTHON_CMD} w_pcgi.py)

View File

@ -1 +1,2 @@
MD5 (zope/Zope-2.4.0-src.tgz) = 1a41e096a80411bccf61cd862bc3cc20
MD5 (zope/Hotfix_2001_08_04.tgz) = c060bf5f1a22b6d93ea3314cae9ea0cc

View File

@ -810,6 +810,9 @@ etc/rc.d/zope.sh
%%ZOPEBASEDIR%%/lib/python/Products/ExternalMethod/help/ExternalMethod.pyc
%%ZOPEBASEDIR%%/lib/python/Products/ExternalMethod/version.txt
%%ZOPEBASEDIR%%/lib/python/Products/ExternalMethod/www/function.gif
%%ZOPEBASEDIR%%/lib/python/Products/Hotfix_2001_08_04/README.txt
%%ZOPEBASEDIR%%/lib/python/Products/Hotfix_2001_08_04/__init__.py
%%ZOPEBASEDIR%%/lib/python/Products/Hotfix_2001_08_04/__init__.pyc
%%ZOPEBASEDIR%%/lib/python/Products/MIMETools/MIMETag.py
%%ZOPEBASEDIR%%/lib/python/Products/MIMETools/MIMETag.pyc
%%ZOPEBASEDIR%%/lib/python/Products/MIMETools/README.txt
@ -2021,6 +2024,7 @@ etc/rc.d/zope.sh
@dirrm %%ZOPEBASEDIR%%/lib/python/Products/MailHost/dtml
@dirrm %%ZOPEBASEDIR%%/lib/python/Products/MailHost
@dirrm %%ZOPEBASEDIR%%/lib/python/Products/MIMETools
@dirrm %%ZOPEBASEDIR%%/lib/python/Products/Hotfix_2001_08_04
@dirrm %%ZOPEBASEDIR%%/lib/python/Products/ExternalMethod/www
@dirrm %%ZOPEBASEDIR%%/lib/python/Products/ExternalMethod/help
@dirrm %%ZOPEBASEDIR%%/lib/python/Products/ExternalMethod/dtml

View File

@ -7,11 +7,13 @@
PORTNAME= zope
PORTVERSION= 2.4.0
CATEGORIES= www python
MASTER_SITES= http://www.zope.org/Products/Zope/${PORTVERSION}/
PORTREVISION= 1
CATEGORIES= www python zope
MASTER_SITES= http://www.zope.org/Products/Zope/${PORTVERSION}/ \
http://www.zope.org/Products/Zope/Hotfix_2001-08-04/
DISTNAME= Zope-${PORTVERSION}-src
EXTRACT_SUFX= .tgz
DISTFILES= ${DISTNAME}${EXTRACT_SUFX}
DISTFILES= ${DISTNAME}.tgz \
Hotfix_2001_08_04.tgz
MAINTAINER= nbm@FreeBSD.org
@ -62,7 +64,7 @@ do-install:
@${ECHO} "===> Please be patient, some builds need their time."
@${ECHO} "===> Copying..."
@${CP} -Rp ${WRKSRC}/* ${ZOPEBASEDIR}/
@${CP} -Rp ${WRKSRC}/lib ${ZOPEBASEDIR}/
@${CP} -Rp ${WRKDIR}/lib ${ZOPEBASEDIR}/
@#
@${CHMOD} -R u+w ${ZOPEBASEDIR}
@(cd ${ZOPEBASEDIR} && ${PYTHON_CMD} w_pcgi.py)

View File

@ -1 +1,2 @@
MD5 (zope/Zope-2.4.0-src.tgz) = 1a41e096a80411bccf61cd862bc3cc20
MD5 (zope/Hotfix_2001_08_04.tgz) = c060bf5f1a22b6d93ea3314cae9ea0cc

View File

@ -810,6 +810,9 @@ etc/rc.d/zope.sh
%%ZOPEBASEDIR%%/lib/python/Products/ExternalMethod/help/ExternalMethod.pyc
%%ZOPEBASEDIR%%/lib/python/Products/ExternalMethod/version.txt
%%ZOPEBASEDIR%%/lib/python/Products/ExternalMethod/www/function.gif
%%ZOPEBASEDIR%%/lib/python/Products/Hotfix_2001_08_04/README.txt
%%ZOPEBASEDIR%%/lib/python/Products/Hotfix_2001_08_04/__init__.py
%%ZOPEBASEDIR%%/lib/python/Products/Hotfix_2001_08_04/__init__.pyc
%%ZOPEBASEDIR%%/lib/python/Products/MIMETools/MIMETag.py
%%ZOPEBASEDIR%%/lib/python/Products/MIMETools/MIMETag.pyc
%%ZOPEBASEDIR%%/lib/python/Products/MIMETools/README.txt
@ -2021,6 +2024,7 @@ etc/rc.d/zope.sh
@dirrm %%ZOPEBASEDIR%%/lib/python/Products/MailHost/dtml
@dirrm %%ZOPEBASEDIR%%/lib/python/Products/MailHost
@dirrm %%ZOPEBASEDIR%%/lib/python/Products/MIMETools
@dirrm %%ZOPEBASEDIR%%/lib/python/Products/Hotfix_2001_08_04
@dirrm %%ZOPEBASEDIR%%/lib/python/Products/ExternalMethod/www
@dirrm %%ZOPEBASEDIR%%/lib/python/Products/ExternalMethod/help
@dirrm %%ZOPEBASEDIR%%/lib/python/Products/ExternalMethod/dtml

View File

@ -7,11 +7,13 @@
PORTNAME= zope
PORTVERSION= 2.4.0
CATEGORIES= www python
MASTER_SITES= http://www.zope.org/Products/Zope/${PORTVERSION}/
PORTREVISION= 1
CATEGORIES= www python zope
MASTER_SITES= http://www.zope.org/Products/Zope/${PORTVERSION}/ \
http://www.zope.org/Products/Zope/Hotfix_2001-08-04/
DISTNAME= Zope-${PORTVERSION}-src
EXTRACT_SUFX= .tgz
DISTFILES= ${DISTNAME}${EXTRACT_SUFX}
DISTFILES= ${DISTNAME}.tgz \
Hotfix_2001_08_04.tgz
MAINTAINER= nbm@FreeBSD.org
@ -62,7 +64,7 @@ do-install:
@${ECHO} "===> Please be patient, some builds need their time."
@${ECHO} "===> Copying..."
@${CP} -Rp ${WRKSRC}/* ${ZOPEBASEDIR}/
@${CP} -Rp ${WRKSRC}/lib ${ZOPEBASEDIR}/
@${CP} -Rp ${WRKDIR}/lib ${ZOPEBASEDIR}/
@#
@${CHMOD} -R u+w ${ZOPEBASEDIR}
@(cd ${ZOPEBASEDIR} && ${PYTHON_CMD} w_pcgi.py)

View File

@ -1 +1,2 @@
MD5 (zope/Zope-2.4.0-src.tgz) = 1a41e096a80411bccf61cd862bc3cc20
MD5 (zope/Hotfix_2001_08_04.tgz) = c060bf5f1a22b6d93ea3314cae9ea0cc

View File

@ -810,6 +810,9 @@ etc/rc.d/zope.sh
%%ZOPEBASEDIR%%/lib/python/Products/ExternalMethod/help/ExternalMethod.pyc
%%ZOPEBASEDIR%%/lib/python/Products/ExternalMethod/version.txt
%%ZOPEBASEDIR%%/lib/python/Products/ExternalMethod/www/function.gif
%%ZOPEBASEDIR%%/lib/python/Products/Hotfix_2001_08_04/README.txt
%%ZOPEBASEDIR%%/lib/python/Products/Hotfix_2001_08_04/__init__.py
%%ZOPEBASEDIR%%/lib/python/Products/Hotfix_2001_08_04/__init__.pyc
%%ZOPEBASEDIR%%/lib/python/Products/MIMETools/MIMETag.py
%%ZOPEBASEDIR%%/lib/python/Products/MIMETools/MIMETag.pyc
%%ZOPEBASEDIR%%/lib/python/Products/MIMETools/README.txt
@ -2021,6 +2024,7 @@ etc/rc.d/zope.sh
@dirrm %%ZOPEBASEDIR%%/lib/python/Products/MailHost/dtml
@dirrm %%ZOPEBASEDIR%%/lib/python/Products/MailHost
@dirrm %%ZOPEBASEDIR%%/lib/python/Products/MIMETools
@dirrm %%ZOPEBASEDIR%%/lib/python/Products/Hotfix_2001_08_04
@dirrm %%ZOPEBASEDIR%%/lib/python/Products/ExternalMethod/www
@dirrm %%ZOPEBASEDIR%%/lib/python/Products/ExternalMethod/help
@dirrm %%ZOPEBASEDIR%%/lib/python/Products/ExternalMethod/dtml

View File

@ -7,11 +7,13 @@
PORTNAME= zope
PORTVERSION= 2.4.0
CATEGORIES= www python
MASTER_SITES= http://www.zope.org/Products/Zope/${PORTVERSION}/
PORTREVISION= 1
CATEGORIES= www python zope
MASTER_SITES= http://www.zope.org/Products/Zope/${PORTVERSION}/ \
http://www.zope.org/Products/Zope/Hotfix_2001-08-04/
DISTNAME= Zope-${PORTVERSION}-src
EXTRACT_SUFX= .tgz
DISTFILES= ${DISTNAME}${EXTRACT_SUFX}
DISTFILES= ${DISTNAME}.tgz \
Hotfix_2001_08_04.tgz
MAINTAINER= nbm@FreeBSD.org
@ -62,7 +64,7 @@ do-install:
@${ECHO} "===> Please be patient, some builds need their time."
@${ECHO} "===> Copying..."
@${CP} -Rp ${WRKSRC}/* ${ZOPEBASEDIR}/
@${CP} -Rp ${WRKSRC}/lib ${ZOPEBASEDIR}/
@${CP} -Rp ${WRKDIR}/lib ${ZOPEBASEDIR}/
@#
@${CHMOD} -R u+w ${ZOPEBASEDIR}
@(cd ${ZOPEBASEDIR} && ${PYTHON_CMD} w_pcgi.py)

View File

@ -1 +1,2 @@
MD5 (zope/Zope-2.4.0-src.tgz) = 1a41e096a80411bccf61cd862bc3cc20
MD5 (zope/Hotfix_2001_08_04.tgz) = c060bf5f1a22b6d93ea3314cae9ea0cc

View File

@ -810,6 +810,9 @@ etc/rc.d/zope.sh
%%ZOPEBASEDIR%%/lib/python/Products/ExternalMethod/help/ExternalMethod.pyc
%%ZOPEBASEDIR%%/lib/python/Products/ExternalMethod/version.txt
%%ZOPEBASEDIR%%/lib/python/Products/ExternalMethod/www/function.gif
%%ZOPEBASEDIR%%/lib/python/Products/Hotfix_2001_08_04/README.txt
%%ZOPEBASEDIR%%/lib/python/Products/Hotfix_2001_08_04/__init__.py
%%ZOPEBASEDIR%%/lib/python/Products/Hotfix_2001_08_04/__init__.pyc
%%ZOPEBASEDIR%%/lib/python/Products/MIMETools/MIMETag.py
%%ZOPEBASEDIR%%/lib/python/Products/MIMETools/MIMETag.pyc
%%ZOPEBASEDIR%%/lib/python/Products/MIMETools/README.txt
@ -2021,6 +2024,7 @@ etc/rc.d/zope.sh
@dirrm %%ZOPEBASEDIR%%/lib/python/Products/MailHost/dtml
@dirrm %%ZOPEBASEDIR%%/lib/python/Products/MailHost
@dirrm %%ZOPEBASEDIR%%/lib/python/Products/MIMETools
@dirrm %%ZOPEBASEDIR%%/lib/python/Products/Hotfix_2001_08_04
@dirrm %%ZOPEBASEDIR%%/lib/python/Products/ExternalMethod/www
@dirrm %%ZOPEBASEDIR%%/lib/python/Products/ExternalMethod/help
@dirrm %%ZOPEBASEDIR%%/lib/python/Products/ExternalMethod/dtml

View File

@ -7,11 +7,13 @@
PORTNAME= zope
PORTVERSION= 2.4.0
CATEGORIES= www python
MASTER_SITES= http://www.zope.org/Products/Zope/${PORTVERSION}/
PORTREVISION= 1
CATEGORIES= www python zope
MASTER_SITES= http://www.zope.org/Products/Zope/${PORTVERSION}/ \
http://www.zope.org/Products/Zope/Hotfix_2001-08-04/
DISTNAME= Zope-${PORTVERSION}-src
EXTRACT_SUFX= .tgz
DISTFILES= ${DISTNAME}${EXTRACT_SUFX}
DISTFILES= ${DISTNAME}.tgz \
Hotfix_2001_08_04.tgz
MAINTAINER= nbm@FreeBSD.org
@ -62,7 +64,7 @@ do-install:
@${ECHO} "===> Please be patient, some builds need their time."
@${ECHO} "===> Copying..."
@${CP} -Rp ${WRKSRC}/* ${ZOPEBASEDIR}/
@${CP} -Rp ${WRKSRC}/lib ${ZOPEBASEDIR}/
@${CP} -Rp ${WRKDIR}/lib ${ZOPEBASEDIR}/
@#
@${CHMOD} -R u+w ${ZOPEBASEDIR}
@(cd ${ZOPEBASEDIR} && ${PYTHON_CMD} w_pcgi.py)

View File

@ -1 +1,2 @@
MD5 (zope/Zope-2.4.0-src.tgz) = 1a41e096a80411bccf61cd862bc3cc20
MD5 (zope/Hotfix_2001_08_04.tgz) = c060bf5f1a22b6d93ea3314cae9ea0cc

View File

@ -810,6 +810,9 @@ etc/rc.d/zope.sh
%%ZOPEBASEDIR%%/lib/python/Products/ExternalMethod/help/ExternalMethod.pyc
%%ZOPEBASEDIR%%/lib/python/Products/ExternalMethod/version.txt
%%ZOPEBASEDIR%%/lib/python/Products/ExternalMethod/www/function.gif
%%ZOPEBASEDIR%%/lib/python/Products/Hotfix_2001_08_04/README.txt
%%ZOPEBASEDIR%%/lib/python/Products/Hotfix_2001_08_04/__init__.py
%%ZOPEBASEDIR%%/lib/python/Products/Hotfix_2001_08_04/__init__.pyc
%%ZOPEBASEDIR%%/lib/python/Products/MIMETools/MIMETag.py
%%ZOPEBASEDIR%%/lib/python/Products/MIMETools/MIMETag.pyc
%%ZOPEBASEDIR%%/lib/python/Products/MIMETools/README.txt
@ -2021,6 +2024,7 @@ etc/rc.d/zope.sh
@dirrm %%ZOPEBASEDIR%%/lib/python/Products/MailHost/dtml
@dirrm %%ZOPEBASEDIR%%/lib/python/Products/MailHost
@dirrm %%ZOPEBASEDIR%%/lib/python/Products/MIMETools
@dirrm %%ZOPEBASEDIR%%/lib/python/Products/Hotfix_2001_08_04
@dirrm %%ZOPEBASEDIR%%/lib/python/Products/ExternalMethod/www
@dirrm %%ZOPEBASEDIR%%/lib/python/Products/ExternalMethod/help
@dirrm %%ZOPEBASEDIR%%/lib/python/Products/ExternalMethod/dtml