Branches for Hoary

Author: Sean Finney
Revision Date: 2004-12-06 18:22:51 UTC

* Sean Finney:
  - another path fix, this time in obsessive_svc_handler. thanks
    to Ragnar Wisloff <ragnar@skolelinux.no> (closes: #284472).
  - don't freak out if the htpasswd file exists but doesn't have
    a nagiosadmin account.
  - fix for installs where nagios was configured via debconf to use
    a combination of apache that no longer exists on the server.
    thanks to Brian C. DeRocher <brian.derocher@mitretek.org>.
    (closes: #284949). upload priority set to medium, as it
    fixes an RC bug.

Author: Martin Pitt
Revision Date: 2006-05-24 10:49:25 UTC

* SECURITY UPDATE: Remote arbitrary code execution with web servers that do
  not check for bogus Content-Length headers (Apache 2 does).
* debian/patches/11_getcgi-negative-content-length.dpatch:
  - Check for invalid large Content-Length values, too.
  - Abort with a proper error message on invalid Content-Length values
    instead of silently correcting it to 0.
* CVE-2006-2489