rpms/python-cherrypy/EL-5 cherrypy-2.2.1-security-sessionfilter.patch, 1.1, 1.2 python-cherrypy.spec, 1.15, 1.16

[Toshio くらとみ (toshio)]

Author: toshio

Update of /cvs/pkgs/rpms/python-cherrypy/EL-5
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv12978

Modified Files:
	cherrypy-2.2.1-security-sessionfilter.patch 
	python-cherrypy.spec 
Log Message:

* Mon Jan 28 2008 Toshio Kuratomi <toshio at fedoraproject.org> 2.2.1-10
- Patch was a backport from CP-3.x.  Fix with the 2.x version.


cherrypy-2.2.1-security-sessionfilter.patch:

Index: cherrypy-2.2.1-security-sessionfilter.patch
===================================================================
RCS file: /cvs/pkgs/rpms/python-cherrypy/EL-5/cherrypy-2.2.1-security-sessionfilter.patch,v
retrieving revision 1.1
retrieving revision 1.2
diff -u -r1.1 -r1.2
--- cherrypy-2.2.1-security-sessionfilter.patch	6 Jan 2008 19:10:44 -0000	1.1
+++ cherrypy-2.2.1-security-sessionfilter.patch	29 Jan 2008 03:59:03 -0000	1.2
@@ -5,7 +5,7 @@
              raise SessionStoragePathNotConfiguredError()
          fileName = self.SESSION_PREFIX + id
          file_path = os.path.join(storage_path, fileName)
-+        if not os.path.normpath(filePath).startswith(storagePath):
++        if not os.path.normpath(file_path).startswith(storagePath):
 +            raise cherrypy.HTTPError(400, "Invalid session id in cookie.")
          return file_path
      


Index: python-cherrypy.spec
===================================================================
RCS file: /cvs/pkgs/rpms/python-cherrypy/EL-5/python-cherrypy.spec,v
retrieving revision 1.15
retrieving revision 1.16
diff -u -r1.15 -r1.16
--- python-cherrypy.spec	23 Jan 2008 06:13:30 -0000	1.15
+++ python-cherrypy.spec	29 Jan 2008 03:59:03 -0000	1.16
@@ -2,7 +2,7 @@
 
 Name:           python-cherrypy
 Version:        2.2.1
-Release:        9%{?dist}
+Release:        10%{?dist}
 Summary:        A pythonic, object-oriented web development framework
 Group:          Development/Libraries
 License:        BSD
@@ -58,6 +58,9 @@
 %{python_sitelib}/*
 
 %changelog
+* Mon Jan 28 2008 Toshio Kuratomi <toshio at fedoraproject.org> 2.2.1-10
+- Patch was a backport from CP-3.x.  Fix with the 2.x version.
+
 * Thu Jan 22 2008 Toshio Kuratomi <toshio at fedoraproject.org> 2.2.1-9
 - Add egg-info so that the new TurboGears can build against cherrypy on F-7
   and F-8 as well as Rawhide.