3ef18e1e59
The issue involves a vulnerability involving "through the web code" inadvertently allowing an untrusted user to remotely shut down a Zope server by allowing the user to inject special headers into the response. If you allow untrusted users to write "through the web" code like Python Scripts, DTML Methods, or Page Templates, your Zope server is vulnerable.
95 lines
3.0 KiB
Makefile
95 lines
3.0 KiB
Makefile
# $OpenBSD: Makefile,v 1.10 2002/04/17 16:04:01 naddy Exp $
|
|
|
|
COMMENT= "object-oriented web application server"
|
|
|
|
VERSION= 2.5.1b1
|
|
PORT_VERSION= ${VERSION}.1
|
|
|
|
DISTNAME= Zope-${VERSION}-src
|
|
PKGNAME= zope-${PORT_VERSION}
|
|
CATEGORIES= www
|
|
NEED_VERSION= 1.516
|
|
|
|
HOMEPAGE= http://www.zope.org/
|
|
|
|
MAINTAINER= Matt Behrens <matt@openbsd.org>
|
|
|
|
PERMIT_PACKAGE_CDROM= Yes
|
|
PERMIT_PACKAGE_FTP= Yes
|
|
PERMIT_DISTFILES_CDROM= Yes
|
|
PERMIT_DISTFILES_FTP= Yes
|
|
|
|
MASTER_SITES= http://www.zope.org/Products/Zope/${VERSION}/
|
|
EXTRACT_SUFX= .tgz
|
|
EXTRACT_CASES= *.tgz) gtar zxf ${FULLDISTDIR}/$$archive ;;
|
|
|
|
MASTER_SITES0= http://www.zope.org/Members/zigg/UnixSecurityPatch/
|
|
PATCHFILES= Zope-${VERSION}-unix-security.patch:0
|
|
PATCH_DIST_STRIP=-p1
|
|
|
|
HOTFIX_DATE1= 2002-04-15
|
|
MASTER_SITES1= http://www.zope.org/Products/Zope/Hotfix_${HOTFIX_DATE1}/
|
|
|
|
DISTFILES= ${DISTNAME}${EXTRACT_SUFX} \
|
|
Hotfix_${HOTFIX_DATE1}.tgz:1
|
|
|
|
BUILD_DEPENDS= :python->=2.1.2,<2.2:lang/python/2.1 \
|
|
:gtar-*:archivers/gtar
|
|
RUN_DEPENDS= :python->=2.1.2,<2.2:lang/python/2.1
|
|
|
|
# Note that the configure script is really just for pcgi, but it's
|
|
# the only one in the package.
|
|
|
|
CONFIGURE_STYLE=gnu
|
|
|
|
WRKBUILD= ${WRKSRC}/pcgi
|
|
MODGNU_CONFIG_GUESS_DIRS= ${WRKBUILD}
|
|
|
|
ZOPEHOME= ${PREFIX}/lib/zope
|
|
PRODUCTSDIR= ${ZOPEHOME}/lib/python/Products
|
|
|
|
do-build:
|
|
cd ${WRKSRC} && \
|
|
ZDIR=${ZOPEHOME} python2.1 w_pcgi.py && \
|
|
ZDIR=${ZOPEHOME} python2.1 -O inst/compilezpy.py
|
|
sed -e "s%@@PREFIX@@%${PREFIX}%g" \
|
|
-e "s%@@LOCALBASE@@%${LOCALBASE}%g" \
|
|
< ${FILESDIR}/zope-instance > ${WRKSRC}/zope-instance
|
|
|
|
# All this should give us what closely resembles a zope.org binary
|
|
# installation and allow us to rely as much as possible on make
|
|
# plist to update to newer versions.
|
|
|
|
do-install:
|
|
${INSTALL_SCRIPT} ${WRKSRC}/zope-instance ${PREFIX}/bin
|
|
${INSTALL_PROGRAM_DIR} ${ZOPEHOME}
|
|
cp -Rp ${WRKSRC}/* ${ZOPEHOME}
|
|
chown -R 0:0 ${ZOPEHOME}
|
|
cd ${ZOPEHOME}/lib && ln -s ../../python2.1
|
|
rm -r ${ZOPEHOME}/*.txt ${ZOPEHOME}/doc ${ZOPEHOME}/lib/Components \
|
|
${ZOPEHOME}/pcgi/Win32
|
|
find ${ZOPEHOME} -name \*.orig -or -name \*.o -or -name .cvsignore \
|
|
-or -name sedscript -or -name \*.old | xargs rm
|
|
find ${ZOPEHOME}/lib/python -name config.c -or -name Makefile \
|
|
-or -name Makefile.pre -or -name Makefile.pre.in | xargs rm
|
|
rm ${ZOPEHOME}/lib/python/Setup ${ZOPEHOME}/pcgi/Makefile \
|
|
${ZOPEHOME}/pcgi/config.log ${ZOPEHOME}/pcgi/config.status \
|
|
${ZOPEHOME}/pcgi/config.cache ${ZOPEHOME}/zope-instance \
|
|
${ZOPEHOME}/w*_pcgi.py*
|
|
${INSTALL_DATA_DIR} ${PREFIX}/share/doc/zope/changenotes
|
|
${INSTALL_DATA} ${WRKSRC}/*.txt ${WRKSRC}/doc/*.txt \
|
|
${PREFIX}/share/doc/zope
|
|
${INSTALL_DATA} ${WRKSRC}/doc/changenotes/* \
|
|
${PREFIX}/share/doc/zope/changenotes
|
|
echo "Zope ${VERSION} (OpenBSD package zope-${PORT_VERSION})" \
|
|
> ${PREFIX}/lib/zope/lib/python/version.txt
|
|
${INSTALL_DATA_DIR} ${PRODUCTSDIR}/Hotfix_${HOTFIX_DATE1}
|
|
${INSTALL_DATA} \
|
|
${WRKDIR}/lib/python/Products/Hotfix_${HOTFIX_DATE1}/* \
|
|
${PRODUCTSDIR}/Hotfix_${HOTFIX_DATE1}
|
|
|
|
do-regress:
|
|
cd ${WRKSRC} && python2.1 utilities/testrunner.py -a
|
|
|
|
.include <bsd.port.mk>
|