Branches for Hardy

Author: Emanuele Gentili
Revision Date: 2008-04-06 00:09:12 UTC

* SECURITY UPDATE: (LP: #209627)
 + debian/patches/92_CVE-2008-1531.dpatch
  - lighttpd 1.4.19 and earlier allows remote attackers to cause a denial
    of service (active SSL connection loss) by triggering an SSL error,
    such as disconnecting before a download has finished, which causes
    all active SSL connections to be lost.
* References
 + http://nvd.nist.gov/nvd.cfm?cvename=CVE-2008-1531
 + http://trac.lighttpd.net/trac/changeset/2136
 + http://trac.lighttpd.net/trac/changeset/2139

Author: Marcin Gibula
Revision Date: 2009-03-04 13:42:05 UTC

* SECURITY UPDATE: (LP: #279490)
 + debian/patches/93_CVE-2008-4298.dpatch
  - Fix memory leak in request header handling
 + debian/patches/95_CVE-2008-4360.dpatch
  - Fix mod_userdir information disclosure
* References
 + https://bugs.launchpad.net/bugs/cve/2008-4298
 + https://bugs.launchpad.net/bugs/cve/2008-4360

Author: Marcin Gibula
Revision Date: 2009-03-04 13:42:05 UTC

* SECURITY UPDATE: (LP: #279490)
 + debian/patches/93_CVE-2008-4298.dpatch
  - Fix memory leak in request header handling
 + debian/patches/95_CVE-2008-4360.dpatch
  - Fix mod_userdir information disclosure
* References
 + https://bugs.launchpad.net/bugs/cve/2008-4298
 + https://bugs.launchpad.net/bugs/cve/2008-4360