Branches for Dapper

Name Status Last Modified Last Commit
lp:ubuntu/dapper/nagios 2 Mature 2009-09-29 10:00:52 UTC
11. * SECURITY UPDATE: Remote arbitrary c...

Author: Martin Pitt
Revision Date: 2006-05-23 13:06:56 UTC

* SECURITY UPDATE: Remote arbitrary code execution with web servers that do
  not check for bogus Content-Length headers (Apache 2 does).
* debian/patches/14_getcgi-negative-content-length.dpatch:
  - Check for invalid large Content-Length values, too.
  - Abort with a proper error message on invalid Content-Length values
    instead of silently correcting it to 0.
* CVE-2006-2489

lp:ubuntu/dapper-security/nagios 2 Mature 2009-07-21 23:53:07 UTC
12. * SECURITY UPDATE: authorization chec...

Author: Marc Deslauriers
Revision Date: 2008-12-18 10:18:15 UTC

* SECURITY UPDATE: authorization check bypass via custom form or
  browser addon
  - debian/patches/20_SECURITY_CVE-2008-5027.dpatch:
    - cgi/cmd.c: strip semicolons and newlines in commit_command().
  - CVE-2008-5027
* debian/rules: do not update po tree for security updates.

lp:ubuntu/dapper-updates/nagios 2 Mature 2009-07-21 23:53:30 UTC
12. * SECURITY UPDATE: authorization chec...

Author: Marc Deslauriers
Revision Date: 2008-12-18 10:18:15 UTC

* SECURITY UPDATE: authorization check bypass via custom form or
  browser addon
  - debian/patches/20_SECURITY_CVE-2008-5027.dpatch:
    - cgi/cmd.c: strip semicolons and newlines in commit_command().
  - CVE-2008-5027
* debian/rules: do not update po tree for security updates.

13 of 3 results