rpms/python-cherrypy/EL-4 cherrypy-2.2.1-security-sessionfilter.patch, 1.1, 1.2 python-cherrypy.spec, 1.9, 1.10

[Toshio くらとみ (toshio)]

Author: toshio

Update of /cvs/pkgs/rpms/python-cherrypy/EL-4
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv13048

Modified Files:
	cherrypy-2.2.1-security-sessionfilter.patch 
	python-cherrypy.spec 
Log Message:
* Mon Jan 28 2008 Toshio Kuratomi <toshio at fedoraproject.org> 2.2.1-10
- Patch was a backport from CP-3.x.  Fix with the 2.x version.


cherrypy-2.2.1-security-sessionfilter.patch:

Index: cherrypy-2.2.1-security-sessionfilter.patch
===================================================================
RCS file: /cvs/pkgs/rpms/python-cherrypy/EL-4/cherrypy-2.2.1-security-sessionfilter.patch,v
retrieving revision 1.1
retrieving revision 1.2
diff -u -r1.1 -r1.2
--- cherrypy-2.2.1-security-sessionfilter.patch	6 Jan 2008 19:13:47 -0000	1.1
+++ cherrypy-2.2.1-security-sessionfilter.patch	29 Jan 2008 03:59:40 -0000	1.2
@@ -5,7 +5,7 @@
              raise SessionStoragePathNotConfiguredError()
          fileName = self.SESSION_PREFIX + id
          file_path = os.path.join(storage_path, fileName)
-+        if not os.path.normpath(filePath).startswith(storagePath):
++        if not os.path.normpath(file_path).startswith(storagePath):
 +            raise cherrypy.HTTPError(400, "Invalid session id in cookie.")
          return file_path
      


Index: python-cherrypy.spec
===================================================================
RCS file: /cvs/pkgs/rpms/python-cherrypy/EL-4/python-cherrypy.spec,v
retrieving revision 1.9
retrieving revision 1.10
diff -u -r1.9 -r1.10
--- python-cherrypy.spec	23 Jan 2008 06:13:17 -0000	1.9
+++ python-cherrypy.spec	29 Jan 2008 03:59:40 -0000	1.10
@@ -2,7 +2,7 @@
 
 Name:           python-cherrypy
 Version:        2.2.1
-Release:        9%{?dist}
+Release:        10%{?dist}
 Summary:        A pythonic, object-oriented web development framework
 Group:          Development/Libraries
 License:        BSD
@@ -58,6 +58,9 @@
 %{python_sitelib}/*
 
 %changelog
+* Mon Jan 28 2008 Toshio Kuratomi <toshio at fedoraproject.org> 2.2.1-10
+- Patch was a backport from CP-3.x.  Fix with the 2.x version.
+
 * Thu Jan 22 2008 Toshio Kuratomi <toshio at fedoraproject.org> 2.2.1-9
 - Add egg-info so that the new TurboGears can build against cherrypy on F-7
   and F-8 as well as Rawhide.