[debian-users:37755] Forward: [SECURITY] [DSA-351-1] New php4 packages fix cross-site scripting vulnerability

[Kenshi Muto <kmuto@xxxxxxxxxxxxxxx>]

現在の Debian 安定版 (3.0 woody) にセキュリティに関する深刻な問題が発見
されました。

対象パッケージ: php4

対処済みのパッケージに更新するには、

deb http://security.debian.org/ stable/updates main contrib non-free

を /etc/apt/sources.list に追加し、

apt-get update ; apt-get upgrade

を実行してください。

詳細については添付のアナウンスをご覧ください。

--- Begin Message ---

• From: Matt Zimmerman <mdz@debian.org>
• Subject: [SECURITY] [DSA-351-1] New php4 packages fix cross-site scripting vulnerability
• Date: Wed, 16 Jul 2003 19:42:46 -0400
• Content-disposition: inline
• List-archive: <http://lists.debian.org/debian-security-announce/>
• List-help: <mailto:debian-security-announce-request@lists.debian.org?subject=help>
• List-id: <debian-security-announce.lists.debian.org>
• List-post: <mailto:debian-security-announce@lists.debian.org>
• List-subscribe: <mailto:debian-security-announce-request@lists.debian.org?subject=subscribe>
• List-unsubscribe: <mailto:debian-security-announce-request@lists.debian.org?subject=unsubscribe>
• Old-return-path: <mdz@xxxxxxxxxxx>
• Priority: urgent
• Resent-date: Wed, 16 Jul 2003 18:42:54 -0500 (CDT)
• Resent-from: debian-security-announce@lists.debian.org
• Resent-message-id: <esWt9D.A.OjE.9LeF_@murphy>
• Resent-sender: debian-security-announce-request@lists.debian.org
• X-bogosity: No, tests=bogofilter, spamicity=0.000000, version=0.13.7.2
• X-debian: PGP check passed for security officers
• X-loop: debian-security-announce@lists.debian.org
• X-mailing-list: <debian-security-announce@lists.debian.org>
• X-original-to: kmuto@xxxxxxxxxxxxxxx
• X-spam-checker-version: SpamAssassin 2.55 (1.174.2.19-2003-05-19-exp)
• X-spam-level:
• X-spam-status: No, hits=-110.3 required=10.0 tests=BAYES_00,PGP_SIGNATURE,USER_AGENT_MUTT,USER_IN_WHITELIST, X_LOOP,X_MAILING_LIST autolearn=ham version=2.55
• X-virus-scanned: by amavisd-new-20030616-p3 (Debian) at topstudio.co.jp
• Message-id: <20030716234246.GA18283@xxxxxxxxx>
• User-agent: Mutt/1.5.4i

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- --------------------------------------------------------------------------
Debian Security Advisory DSA 351-1                     security@debian.org
http://www.debian.org/security/                             Matt Zimmerman
July 16th, 2003                         http://www.debian.org/security/faq
- --------------------------------------------------------------------------

Package        : php4
Vulnerability  : cross-site scripting
Problem-Type   : remote
Debian-specific: no
CVE Id         : CAN-2003-0442

The transparent session ID feature in the php4 package does not
properly escape user-supplied input before inserting it into the
generated HTML page.  An attacker could use this vulnerability to
execute embedded scripts within the context of the generated page.

For the stable distribution (woody) this problem has been fixed in
version 4:4.1.2-6woody3.

For the unstable distribution (sid) this problem will be fixed soon.
Refer to Debian bug #200736.

We recommend that you update your php4 package.

Upgrade Instructions
- --------------------

wget url
        will fetch the file for you
dpkg -i file.deb
        will install the referenced file.

If you are using the apt-get package manager, use the line for
sources.list as given below:

apt-get update
        will update the internal database
apt-get upgrade
        will install corrected packages

Debian GNU/Linux 3.0 alias woody
- --------------------------------

  Source archives:

    http://security.debian.org/pool/updates/main/p/php4/php4_4.1.2-6woody3.dsc
      Size/MD5 checksum:     1516 eb3f47335e2d614080f84d77167e2f70
    http://security.debian.org/pool/updates/main/p/php4/php4_4.1.2-6woody3.diff.gz
      Size/MD5 checksum:    99346 adcef679d170e9852fe101f14f019338
    http://security.debian.org/pool/updates/main/p/php4/php4_4.1.2.orig.tar.gz
      Size/MD5 checksum:  3346579 37e67552bec20e6f02d52e14a11aa269

  Architecture independent components:

    http://security.debian.org/pool/updates/main/p/php4/php4-dev_4.1.2-6woody3_all.deb
      Size/MD5 checksum:   208222 c2416d17f9663c8412fa5861346abb1c
    http://security.debian.org/pool/updates/main/p/php4/php4-pear_4.1.2-6woody3_all.deb
      Size/MD5 checksum:   222666 e77655a6852126c28935db9d3f54a52b

  Alpha architecture:

    http://security.debian.org/pool/updates/main/p/php4/caudium-php4_4.1.2-6woody3_alpha.deb
      Size/MD5 checksum:   713304 c42dd69dd858c2f4e807a2b650e2123a
    http://security.debian.org/pool/updates/main/p/php4/php4_4.1.2-6woody3_alpha.deb
      Size/MD5 checksum:   694902 95a9fb9b8674979e3d73a3018d379008
    http://security.debian.org/pool/updates/main/p/php4/php4-cgi_4.1.2-6woody3_alpha.deb
      Size/MD5 checksum:  1294254 a0768eb666c36c026239fb15a88c9587
    http://security.debian.org/pool/updates/main/p/php4/php4-curl_4.1.2-6woody3_alpha.deb
      Size/MD5 checksum:    15090 867f0275cafd14f67c69ece645a1b09a
    http://security.debian.org/pool/updates/main/p/php4/php4-domxml_4.1.2-6woody3_alpha.deb
      Size/MD5 checksum:    21264 062708241c56b802c6fd15c6fa9ee322
    http://security.debian.org/pool/updates/main/p/php4/php4-gd_4.1.2-6woody3_alpha.deb
      Size/MD5 checksum:    29280 a9f3eb30c45f09b6df5e0f2329c225b5
    http://security.debian.org/pool/updates/main/p/php4/php4-imap_4.1.2-6woody3_alpha.deb
      Size/MD5 checksum:    33326 0cbb6e8b8a495a667632b437c1397bc9
    http://security.debian.org/pool/updates/main/p/php4/php4-ldap_4.1.2-6woody3_alpha.deb
      Size/MD5 checksum:    18388 e86d7e3f172bcadecae8d4ec6221dcd9
    http://security.debian.org/pool/updates/main/p/php4/php4-mcal_4.1.2-6woody3_alpha.deb
      Size/MD5 checksum:    15436 a5c64c33f68cdd283ce97c91187f59c7
    http://security.debian.org/pool/updates/main/p/php4/php4-mhash_4.1.2-6woody3_alpha.deb
      Size/MD5 checksum:     6122 7542e1c48071e1b68220c46115a4a92b
    http://security.debian.org/pool/updates/main/p/php4/php4-mysql_4.1.2-6woody3_alpha.deb
      Size/MD5 checksum:    19232 11418455e2edced068108fd9c32be808
    http://security.debian.org/pool/updates/main/p/php4/php4-odbc_4.1.2-6woody3_alpha.deb
      Size/MD5 checksum:    25546 9970ef60dd839ab5acdd95541644a8e2
    http://security.debian.org/pool/updates/main/p/php4/php4-recode_4.1.2-6woody3_alpha.deb
      Size/MD5 checksum:     5438 7cf69f8cd1eb3b50097d70aafe3cbb53
    http://security.debian.org/pool/updates/main/p/php4/php4-snmp_4.1.2-6woody3_alpha.deb
      Size/MD5 checksum:     7364 1b4116c3d5cc6b5d022d9438f3b9eb5c
    http://security.debian.org/pool/updates/main/p/php4/php4-sybase_4.1.2-6woody3_alpha.deb
      Size/MD5 checksum:    16282 961f0a01381db3466066f57de87d2a28
    http://security.debian.org/pool/updates/main/p/php4/php4-xslt_4.1.2-6woody3_alpha.deb
      Size/MD5 checksum:    29372 8660a8bf29f05d2b27424d58e3ea57ae

  ARM architecture:

    http://security.debian.org/pool/updates/main/p/php4/caudium-php4_4.1.2-6woody3_arm.deb
      Size/MD5 checksum:   652756 0d00630292ec72a9d84eaf6a98f4978a
    http://security.debian.org/pool/updates/main/p/php4/php4_4.1.2-6woody3_arm.deb
      Size/MD5 checksum:   626458 00335ebf1de5e8e2d555c3f38c8a9c5f
    http://security.debian.org/pool/updates/main/p/php4/php4-cgi_4.1.2-6woody3_arm.deb
      Size/MD5 checksum:  1076634 ea63baf1cec384fc776566b58f0d8a0f
    http://security.debian.org/pool/updates/main/p/php4/php4-curl_4.1.2-6woody3_arm.deb
      Size/MD5 checksum:    14020 8bc7e2527839f372f31d859a1f5119ef
    http://security.debian.org/pool/updates/main/p/php4/php4-domxml_4.1.2-6woody3_arm.deb
      Size/MD5 checksum:    19908 5813536ca47f1ae137b7ace079ddcb6c
    http://security.debian.org/pool/updates/main/p/php4/php4-gd_4.1.2-6woody3_arm.deb
      Size/MD5 checksum:    26966 4a409f0a89598202aea13a2ac7b519a5
    http://security.debian.org/pool/updates/main/p/php4/php4-imap_4.1.2-6woody3_arm.deb
      Size/MD5 checksum:    32860 ad9eca9a9c14a64cc0d44cd6126f2bbe
    http://security.debian.org/pool/updates/main/p/php4/php4-ldap_4.1.2-6woody3_arm.deb
      Size/MD5 checksum:    16506 a83964d400aee51693d7f6c1d13eadba
    http://security.debian.org/pool/updates/main/p/php4/php4-mcal_4.1.2-6woody3_arm.deb
      Size/MD5 checksum:    15336 98cd5403f5f79b6b0d959f0668d0a0f0
    http://security.debian.org/pool/updates/main/p/php4/php4-mhash_4.1.2-6woody3_arm.deb
      Size/MD5 checksum:     5588 68114350aa64157cd912c8e022fa4400
    http://security.debian.org/pool/updates/main/p/php4/php4-mysql_4.1.2-6woody3_arm.deb
      Size/MD5 checksum:    15874 a9e122c39fa316e750c99989e9b39062
    http://security.debian.org/pool/updates/main/p/php4/php4-odbc_4.1.2-6woody3_arm.deb
      Size/MD5 checksum:    24610 8ac5bf9ea22a88ee3987a88759b32d38
    http://security.debian.org/pool/updates/main/p/php4/php4-recode_4.1.2-6woody3_arm.deb
      Size/MD5 checksum:     5132 44a2abb171c724e87188fe93dfd41ce2
    http://security.debian.org/pool/updates/main/p/php4/php4-snmp_4.1.2-6woody3_arm.deb
      Size/MD5 checksum:     6996 ba93d52ceea71f597a620cd00c8e8aed
    http://security.debian.org/pool/updates/main/p/php4/php4-sybase_4.1.2-6woody3_arm.deb
      Size/MD5 checksum:    14360 a60d6629e73146884cdcaf4ef7c3174c
    http://security.debian.org/pool/updates/main/p/php4/php4-xslt_4.1.2-6woody3_arm.deb
      Size/MD5 checksum:    11718 7dfb43391dd30ebb243dca51a35b5795

  Intel IA-32 architecture:

    http://security.debian.org/pool/updates/main/p/php4/caudium-php4_4.1.2-6woody3_i386.deb
      Size/MD5 checksum:   597910 26a6e1afd68408c571ee0e05d1877b84
    http://security.debian.org/pool/updates/main/p/php4/php4_4.1.2-6woody3_i386.deb
      Size/MD5 checksum:   582656 da318da94e25d6bc78ecc6cf0f7b78b6
    http://security.debian.org/pool/updates/main/p/php4/php4-cgi_4.1.2-6woody3_i386.deb
      Size/MD5 checksum:   990574 22331145a54bc000a9012b30a293f89d
    http://security.debian.org/pool/updates/main/p/php4/php4-curl_4.1.2-6woody3_i386.deb
      Size/MD5 checksum:    12368 5ed571903ec6217169851c1597f2f9af
    http://security.debian.org/pool/updates/main/p/php4/php4-domxml_4.1.2-6woody3_i386.deb
      Size/MD5 checksum:    17652 bd9be00c0ee676d45ea59de2b581efde
    http://security.debian.org/pool/updates/main/p/php4/php4-gd_4.1.2-6woody3_i386.deb
      Size/MD5 checksum:    24506 4a67421a0d3232465583b70929772d41
    http://security.debian.org/pool/updates/main/p/php4/php4-imap_4.1.2-6woody3_i386.deb
      Size/MD5 checksum:   376806 6958303cca3ffc84dccf6cff6bdd3b9c
    http://security.debian.org/pool/updates/main/p/php4/php4-ldap_4.1.2-6woody3_i386.deb
      Size/MD5 checksum:    14794 d01bfce0e99c48a3319b7f6663583ce5
    http://security.debian.org/pool/updates/main/p/php4/php4-mcal_4.1.2-6woody3_i386.deb
      Size/MD5 checksum:    13870 105c3cd8b4bc86a0585b63cd23f75110
    http://security.debian.org/pool/updates/main/p/php4/php4-mhash_4.1.2-6woody3_i386.deb
      Size/MD5 checksum:     5616 e734008b7cb268b50e1705820d3e69c1
    http://security.debian.org/pool/updates/main/p/php4/php4-mysql_4.1.2-6woody3_i386.deb
      Size/MD5 checksum:    15076 100420f073cf9b2bbdc706236fb5aa8b
    http://security.debian.org/pool/updates/main/p/php4/php4-odbc_4.1.2-6woody3_i386.deb
      Size/MD5 checksum:    20800 1112a067819780ca7fb00f99a8bb0a5e
    http://security.debian.org/pool/updates/main/p/php4/php4-recode_4.1.2-6woody3_i386.deb
      Size/MD5 checksum:     4944 81f733d3fcbe446adab290f7d59b88d1
    http://security.debian.org/pool/updates/main/p/php4/php4-snmp_4.1.2-6woody3_i386.deb
      Size/MD5 checksum:     6648 8b60fb61d2a0448ec26ffda5ee1a489a
    http://security.debian.org/pool/updates/main/p/php4/php4-sybase_4.1.2-6woody3_i386.deb
      Size/MD5 checksum:    13348 c06380f9b438ad84ccab778e8aa2f651
    http://security.debian.org/pool/updates/main/p/php4/php4-xslt_4.1.2-6woody3_i386.deb
      Size/MD5 checksum:    24598 2f8bd7148031b07ae6ad44462e154b89

  Intel IA-64 architecture:

    http://security.debian.org/pool/updates/main/p/php4/caudium-php4_4.1.2-6woody3_ia64.deb
      Size/MD5 checksum:   920072 34327710f71afadcd4be1f0832d728db
    http://security.debian.org/pool/updates/main/p/php4/php4_4.1.2-6woody3_ia64.deb
      Size/MD5 checksum:   889450 795026c98c4390de1a9185dc94d80660
    http://security.debian.org/pool/updates/main/p/php4/php4-cgi_4.1.2-6woody3_ia64.deb
      Size/MD5 checksum:  1601056 ef5fd74751ce7930b81627b23ae893aa
    http://security.debian.org/pool/updates/main/p/php4/php4-curl_4.1.2-6woody3_ia64.deb
      Size/MD5 checksum:    18346 43305be0ef368a9c1e903c00bd25e68e
    http://security.debian.org/pool/updates/main/p/php4/php4-domxml_4.1.2-6woody3_ia64.deb
      Size/MD5 checksum:    26190 ddab63fae61f638b26bf4c9a80c7bd63
    http://security.debian.org/pool/updates/main/p/php4/php4-gd_4.1.2-6woody3_ia64.deb
      Size/MD5 checksum:    37882 09e7e10ec4349ba20883b8866e775bb0
    http://security.debian.org/pool/updates/main/p/php4/php4-imap_4.1.2-6woody3_ia64.deb
      Size/MD5 checksum:    43998 552ae14f258d8ba395c3c4cfabbeef82
    http://security.debian.org/pool/updates/main/p/php4/php4-ldap_4.1.2-6woody3_ia64.deb
      Size/MD5 checksum:    22546 8a9806a0fbbcae8509015217630f6b22
    http://security.debian.org/pool/updates/main/p/php4/php4-mcal_4.1.2-6woody3_ia64.deb
      Size/MD5 checksum:    20076 64f6b99f860f820fd7ad8caa032aface
    http://security.debian.org/pool/updates/main/p/php4/php4-mhash_4.1.2-6woody3_ia64.deb
      Size/MD5 checksum:     7556 4ade56f7111f74ea90bb3c53d7f8e494
    http://security.debian.org/pool/updates/main/p/php4/php4-mysql_4.1.2-6woody3_ia64.deb
      Size/MD5 checksum:    22474 7d738f287d669e562706760ad0cf6629
    http://security.debian.org/pool/updates/main/p/php4/php4-odbc_4.1.2-6woody3_ia64.deb
      Size/MD5 checksum:    32768 2f1bbf4d0bb557c30b823930ec2b3ecc
    http://security.debian.org/pool/updates/main/p/php4/php4-recode_4.1.2-6woody3_ia64.deb
      Size/MD5 checksum:     6340 8200300bad97e188beab86c56890ac25
    http://security.debian.org/pool/updates/main/p/php4/php4-snmp_4.1.2-6woody3_ia64.deb
      Size/MD5 checksum:     8674 9c4e79db553c4984bed6589696730a67
    http://security.debian.org/pool/updates/main/p/php4/php4-sybase_4.1.2-6woody3_ia64.deb
      Size/MD5 checksum:    20390 cb275bec83a1522343cea5162888bdf9
    http://security.debian.org/pool/updates/main/p/php4/php4-xslt_4.1.2-6woody3_ia64.deb
      Size/MD5 checksum:    40610 50edcfcf485d5ba550a59bc59992b76b

  HP Precision architecture:

    http://security.debian.org/pool/updates/main/p/php4/caudium-php4_4.1.2-6woody3_hppa.deb
      Size/MD5 checksum:   757252 c1d94ec4bf9fb011fed50c8990eebd93
    http://security.debian.org/pool/updates/main/p/php4/php4_4.1.2-6woody3_hppa.deb
      Size/MD5 checksum:   734598 49dbbbab17c167d59d050d1a4ac260c6
    http://security.debian.org/pool/updates/main/p/php4/php4-cgi_4.1.2-6woody3_hppa.deb
      Size/MD5 checksum:  1212482 7079577881d55ca2a7912d71d90e1ba9
    http://security.debian.org/pool/updates/main/p/php4/php4-curl_4.1.2-6woody3_hppa.deb
      Size/MD5 checksum:    15604 5e7dde526151fee00a5d5719920901d4
    http://security.debian.org/pool/updates/main/p/php4/php4-domxml_4.1.2-6woody3_hppa.deb
      Size/MD5 checksum:    22756 5e96444dc159ac8c992ee3592b29cfee
    http://security.debian.org/pool/updates/main/p/php4/php4-gd_4.1.2-6woody3_hppa.deb
      Size/MD5 checksum:    31488 bc5a0c67a1f9cf9926c18e9005acccc3
    http://security.debian.org/pool/updates/main/p/php4/php4-imap_4.1.2-6woody3_hppa.deb
      Size/MD5 checksum:    37480 65460f3ecde898efbaded72fda28a214
    http://security.debian.org/pool/updates/main/p/php4/php4-ldap_4.1.2-6woody3_hppa.deb
      Size/MD5 checksum:    19018 30a5594ba259f89576ebc4266c7177ae
    http://security.debian.org/pool/updates/main/p/php4/php4-mcal_4.1.2-6woody3_hppa.deb
      Size/MD5 checksum:    17316 ca36c7e1346f1624d033e8706b102cce
    http://security.debian.org/pool/updates/main/p/php4/php4-mhash_4.1.2-6woody3_hppa.deb
      Size/MD5 checksum:     6062 60c1d5218f2523f20e1db1fbce88ada8
    http://security.debian.org/pool/updates/main/p/php4/php4-mysql_4.1.2-6woody3_hppa.deb
      Size/MD5 checksum:    17958 1b6aef28eb711e5937dba81e6fb32a92
    http://security.debian.org/pool/updates/main/p/php4/php4-odbc_4.1.2-6woody3_hppa.deb
      Size/MD5 checksum:    26662 d7f3b3598d9c2da2842cd7bd6d745421
    http://security.debian.org/pool/updates/main/p/php4/php4-recode_4.1.2-6woody3_hppa.deb
      Size/MD5 checksum:     5564 9a1fbdb1f08df92226978a0b157586ae
    http://security.debian.org/pool/updates/main/p/php4/php4-snmp_4.1.2-6woody3_hppa.deb
      Size/MD5 checksum:     7290 4d9c2495655d80cbad6da869244ba01d
    http://security.debian.org/pool/updates/main/p/php4/php4-sybase_4.1.2-6woody3_hppa.deb
      Size/MD5 checksum:    16538 de6575025cec58358c0d84aa9318e7b3
    http://security.debian.org/pool/updates/main/p/php4/php4-xslt_4.1.2-6woody3_hppa.deb
      Size/MD5 checksum:    26906 77c769ca8e41a85613b9a678a5690bc5

  Motorola 680x0 architecture:

    http://security.debian.org/pool/updates/main/p/php4/caudium-php4_4.1.2-6woody3_m68k.deb
      Size/MD5 checksum:   580942 0a8e15f3107801c82bbc932814e0f5d4
    http://security.debian.org/pool/updates/main/p/php4/php4_4.1.2-6woody3_m68k.deb
      Size/MD5 checksum:   573068 e6b1c5376c11fa76cd8818d87aedb1b4
    http://security.debian.org/pool/updates/main/p/php4/php4-cgi_4.1.2-6woody3_m68k.deb
      Size/MD5 checksum:   932630 23f76ee8db64123445d3989c24dd74de
    http://security.debian.org/pool/updates/main/p/php4/php4-curl_4.1.2-6woody3_m68k.deb
      Size/MD5 checksum:    13400 04c3dea93d16e5ce964c61811129d4ea
    http://security.debian.org/pool/updates/main/p/php4/php4-domxml_4.1.2-6woody3_m68k.deb
      Size/MD5 checksum:    18596 4fa2d1868618a6f37059f9d69313e288
    http://security.debian.org/pool/updates/main/p/php4/php4-gd_4.1.2-6woody3_m68k.deb
      Size/MD5 checksum:    23824 fcf7618c513d38b9ec1c81b327e87d9c
    http://security.debian.org/pool/updates/main/p/php4/php4-imap_4.1.2-6woody3_m68k.deb
      Size/MD5 checksum:    27870 5751f4303f8aadaebb793a275caf4840
    http://security.debian.org/pool/updates/main/p/php4/php4-ldap_4.1.2-6woody3_m68k.deb
      Size/MD5 checksum:    14600 52cceaf0a0b6ae6c496cfe239a68584c
    http://security.debian.org/pool/updates/main/p/php4/php4-mcal_4.1.2-6woody3_m68k.deb
      Size/MD5 checksum:    14022 6fad5018ad4df019a7fc47207d692a85
    http://security.debian.org/pool/updates/main/p/php4/php4-mhash_4.1.2-6woody3_m68k.deb
      Size/MD5 checksum:     5400 8b0918d35e52e28b596fdb3091f2a707
    http://security.debian.org/pool/updates/main/p/php4/php4-mysql_4.1.2-6woody3_m68k.deb
      Size/MD5 checksum:    15054 9b5afba0b8e0ecaf448bb095230c1326
    http://security.debian.org/pool/updates/main/p/php4/php4-odbc_4.1.2-6woody3_m68k.deb
      Size/MD5 checksum:    20686 dc233698bb57d47f322be4176f01bf06
    http://security.debian.org/pool/updates/main/p/php4/php4-recode_4.1.2-6woody3_m68k.deb
      Size/MD5 checksum:     4936 ee4c1bb28d39f7e4ddb82bd0dde0b600
    http://security.debian.org/pool/updates/main/p/php4/php4-snmp_4.1.2-6woody3_m68k.deb
      Size/MD5 checksum:     6528 d084f110cfb06f0887d3c60e57d712d7
    http://security.debian.org/pool/updates/main/p/php4/php4-sybase_4.1.2-6woody3_m68k.deb
      Size/MD5 checksum:    13380 49816d01c8203697e67b7f374f6acc54
    http://security.debian.org/pool/updates/main/p/php4/php4-xslt_4.1.2-6woody3_m68k.deb
      Size/MD5 checksum:    24966 f1e2b0e7d43c6a78a308b3d9a3fd8bcc

  Big endian MIPS architecture:

    http://security.debian.org/pool/updates/main/p/php4/caudium-php4_4.1.2-6woody3_mips.deb
      Size/MD5 checksum:   615210 8ac953755355d293ca8dc590a973f44c
    http://security.debian.org/pool/updates/main/p/php4/php4_4.1.2-6woody3_mips.deb
      Size/MD5 checksum:   607404 6e516eb2fbbd2fccd4244a6231aa1307
    http://security.debian.org/pool/updates/main/p/php4/php4-cgi_4.1.2-6woody3_mips.deb
      Size/MD5 checksum:  1095726 2d1ecbf90e469585d214c1205f42b49f
    http://security.debian.org/pool/updates/main/p/php4/php4-curl_4.1.2-6woody3_mips.deb
      Size/MD5 checksum:    12108 c6ada6826215993f9464ba2b20ca6cfa
    http://security.debian.org/pool/updates/main/p/php4/php4-domxml_4.1.2-6woody3_mips.deb
      Size/MD5 checksum:    16834 45723f5fc36dd665ed4a978eef2bc068
    http://security.debian.org/pool/updates/main/p/php4/php4-gd_4.1.2-6woody3_mips.deb
      Size/MD5 checksum:    24758 a9012e1dfb3ebb8aa44fe0e9fae9be27
    http://security.debian.org/pool/updates/main/p/php4/php4-imap_4.1.2-6woody3_mips.deb
      Size/MD5 checksum:    27342 d8ff6acf5ae1dac822c13ffeb0e2c895
    http://security.debian.org/pool/updates/main/p/php4/php4-ldap_4.1.2-6woody3_mips.deb
      Size/MD5 checksum:    15026 567d8ce3125497df6abdbd26bb00857f
    http://security.debian.org/pool/updates/main/p/php4/php4-mcal_4.1.2-6woody3_mips.deb
      Size/MD5 checksum:    13026 e4785bad24573737b05f09594aaae2ca
    http://security.debian.org/pool/updates/main/p/php4/php4-mhash_4.1.2-6woody3_mips.deb
      Size/MD5 checksum:     5622 ed41096fce6e51ae0f8786e1a7cdabc7
    http://security.debian.org/pool/updates/main/p/php4/php4-mysql_4.1.2-6woody3_mips.deb
      Size/MD5 checksum:    15224 692c4982f692998964bd7d8b0d3d0fb9
    http://security.debian.org/pool/updates/main/p/php4/php4-odbc_4.1.2-6woody3_mips.deb
      Size/MD5 checksum:    20768 77ded8fbcb6ee2bc626322c448bc2bc5
    http://security.debian.org/pool/updates/main/p/php4/php4-recode_4.1.2-6woody3_mips.deb
      Size/MD5 checksum:     5078 803a17a79e08bafc044eead402b199c2
    http://security.debian.org/pool/updates/main/p/php4/php4-snmp_4.1.2-6woody3_mips.deb
      Size/MD5 checksum:     6576 a8872c3be119c299d6ffcfb604772ac0
    http://security.debian.org/pool/updates/main/p/php4/php4-sybase_4.1.2-6woody3_mips.deb
      Size/MD5 checksum:    14080 3886d449bc23295065e99e1d60477e51
    http://security.debian.org/pool/updates/main/p/php4/php4-xslt_4.1.2-6woody3_mips.deb
      Size/MD5 checksum:    25462 55d47e3673e8018426e1cfc109e84700

  Little endian MIPS architecture:

    http://security.debian.org/pool/updates/main/p/php4/caudium-php4_4.1.2-6woody3_mipsel.deb
      Size/MD5 checksum:   609724 3e4ff7cd05a1754022b6ee1b9a2480ba
    http://security.debian.org/pool/updates/main/p/php4/php4_4.1.2-6woody3_mipsel.deb
      Size/MD5 checksum:   602900 1c5a97cd13d562620df8d89932833aa1
    http://security.debian.org/pool/updates/main/p/php4/php4-cgi_4.1.2-6woody3_mipsel.deb
      Size/MD5 checksum:  1089750 dcaf2fa0ff99351d5d2a8e8084da7a67
    http://security.debian.org/pool/updates/main/p/php4/php4-curl_4.1.2-6woody3_mipsel.deb
      Size/MD5 checksum:    12014 ac7ad8efb2c03b991906ee6c849d4e09
    http://security.debian.org/pool/updates/main/p/php4/php4-domxml_4.1.2-6woody3_mipsel.deb
      Size/MD5 checksum:    16708 9f840ff6f2f38a774dddde607662e7f0
    http://security.debian.org/pool/updates/main/p/php4/php4-gd_4.1.2-6woody3_mipsel.deb
      Size/MD5 checksum:    24536 538ea1a075d687a004009e23069655eb
    http://security.debian.org/pool/updates/main/p/php4/php4-imap_4.1.2-6woody3_mipsel.deb
      Size/MD5 checksum:    27102 f66a4fbcf222a007ef6484451cc79084
    http://security.debian.org/pool/updates/main/p/php4/php4-ldap_4.1.2-6woody3_mipsel.deb
      Size/MD5 checksum:    14932 553898f04070d4adf3811d709699fd8f
    http://security.debian.org/pool/updates/main/p/php4/php4-mcal_4.1.2-6woody3_mipsel.deb
      Size/MD5 checksum:    12898 43227aa23a0c9a3f7c6ebfe058f172c2
    http://security.debian.org/pool/updates/main/p/php4/php4-mhash_4.1.2-6woody3_mipsel.deb
      Size/MD5 checksum:     5580 dcc6ed93048826475b69a364ba768653
    http://security.debian.org/pool/updates/main/p/php4/php4-mysql_4.1.2-6woody3_mipsel.deb
      Size/MD5 checksum:    15094 aeb1cdc75fe07fa21e436656190fc2fa
    http://security.debian.org/pool/updates/main/p/php4/php4-odbc_4.1.2-6woody3_mipsel.deb
      Size/MD5 checksum:    20624 05d6a842ab371ace2cb062e605e38783
    http://security.debian.org/pool/updates/main/p/php4/php4-recode_4.1.2-6woody3_mipsel.deb
      Size/MD5 checksum:     5026 74191d60ee29d544277c1b477b0d2028
    http://security.debian.org/pool/updates/main/p/php4/php4-snmp_4.1.2-6woody3_mipsel.deb
      Size/MD5 checksum:     6494 9cf7106232424a56b2ab757bbfb4d143
    http://security.debian.org/pool/updates/main/p/php4/php4-sybase_4.1.2-6woody3_mipsel.deb
      Size/MD5 checksum:    14046 ddbfb7179395078e633624f7d32962d9
    http://security.debian.org/pool/updates/main/p/php4/php4-xslt_4.1.2-6woody3_mipsel.deb
      Size/MD5 checksum:    25220 3dc4eeecd9b5d80199ddc735093d0379

  PowerPC architecture:

    http://security.debian.org/pool/updates/main/p/php4/caudium-php4_4.1.2-6woody3_powerpc.deb
      Size/MD5 checksum:   652948 45175632323eaa5d7058d0d7ef202f83
    http://security.debian.org/pool/updates/main/p/php4/php4_4.1.2-6woody3_powerpc.deb
      Size/MD5 checksum:   637866 0062446436cd44bad667c6aae62cd911
    http://security.debian.org/pool/updates/main/p/php4/php4-cgi_4.1.2-6woody3_powerpc.deb
      Size/MD5 checksum:  1071090 7a6388cb37042c1a694a32ac6ca48f65
    http://security.debian.org/pool/updates/main/p/php4/php4-curl_4.1.2-6woody3_powerpc.deb
      Size/MD5 checksum:    13682 f225447420c50a9bd08621c3b9f49b76
    http://security.debian.org/pool/updates/main/p/php4/php4-domxml_4.1.2-6woody3_powerpc.deb
      Size/MD5 checksum:    20926 c1dd2aa2b9b248e1e622f4a76556afe7
    http://security.debian.org/pool/updates/main/p/php4/php4-gd_4.1.2-6woody3_powerpc.deb
      Size/MD5 checksum:    28120 706b631c599c6258b4f832d1f35f1b68
    http://security.debian.org/pool/updates/main/p/php4/php4-imap_4.1.2-6woody3_powerpc.deb
      Size/MD5 checksum:    31320 63d981d1bb5e035c6785ee8d07afa25b
    http://security.debian.org/pool/updates/main/p/php4/php4-ldap_4.1.2-6woody3_powerpc.deb
      Size/MD5 checksum:    16290 ebbdc382a0c0bbcd7547359d447e2aa1
    http://security.debian.org/pool/updates/main/p/php4/php4-mcal_4.1.2-6woody3_powerpc.deb
      Size/MD5 checksum:    15038 596eb86aaf831217146bcd00e119f97b
    http://security.debian.org/pool/updates/main/p/php4/php4-mhash_4.1.2-6woody3_powerpc.deb
      Size/MD5 checksum:     5630 e898df11bc8cae0a434f1efa27649e19
    http://security.debian.org/pool/updates/main/p/php4/php4-mysql_4.1.2-6woody3_powerpc.deb
      Size/MD5 checksum:    16074 554915cdab8c67bd01ffaea141c466a6
    http://security.debian.org/pool/updates/main/p/php4/php4-odbc_4.1.2-6woody3_powerpc.deb
      Size/MD5 checksum:    23774 bc55ec84f63d17d2557ceefbebc69363
    http://security.debian.org/pool/updates/main/p/php4/php4-recode_4.1.2-6woody3_powerpc.deb
      Size/MD5 checksum:     5078 eb45dcfc70ff75b5724298c0738a3267
    http://security.debian.org/pool/updates/main/p/php4/php4-snmp_4.1.2-6woody3_powerpc.deb
      Size/MD5 checksum:     6554 cd87a04ccd6538168bc5f289f2e114b5
    http://security.debian.org/pool/updates/main/p/php4/php4-sybase_4.1.2-6woody3_powerpc.deb
      Size/MD5 checksum:    14432 9e31c6e9ca6a98eda59c1c941c630456
    http://security.debian.org/pool/updates/main/p/php4/php4-xslt_4.1.2-6woody3_powerpc.deb
      Size/MD5 checksum:    26964 4c8e0a2906f353806fe003f12a96d429

  IBM S/390 architecture:

    http://security.debian.org/pool/updates/main/p/php4/caudium-php4_4.1.2-6woody3_s390.deb
      Size/MD5 checksum:   640426 28ddfe3c5685d5ce5cc66aaab3b57505
    http://security.debian.org/pool/updates/main/p/php4/php4_4.1.2-6woody3_s390.deb
      Size/MD5 checksum:   629346 29513f872f062d1bf0df9e2bc321de80
    http://security.debian.org/pool/updates/main/p/php4/php4-cgi_4.1.2-6woody3_s390.deb
      Size/MD5 checksum:  1016866 a7d13c21d70a17408128d0f22654e2b1
    http://security.debian.org/pool/updates/main/p/php4/php4-curl_4.1.2-6woody3_s390.deb
      Size/MD5 checksum:    13006 74adb6ebc496448c75385edaf6dd1d80
    http://security.debian.org/pool/updates/main/p/php4/php4-domxml_4.1.2-6woody3_s390.deb
      Size/MD5 checksum:    19148 527a64e75fdaac18af3584327a8c6488
    http://security.debian.org/pool/updates/main/p/php4/php4-gd_4.1.2-6woody3_s390.deb
      Size/MD5 checksum:    25720 61b62de7c0f527a7882141d307d09c2e
    http://security.debian.org/pool/updates/main/p/php4/php4-imap_4.1.2-6woody3_s390.deb
      Size/MD5 checksum:    29602 56163fa1395b5c0a6c3763297fb56925
    http://security.debian.org/pool/updates/main/p/php4/php4-ldap_4.1.2-6woody3_s390.deb
      Size/MD5 checksum:    16124 9b9fe159a0707189cb9335df8d7e2ede
    http://security.debian.org/pool/updates/main/p/php4/php4-mcal_4.1.2-6woody3_s390.deb
      Size/MD5 checksum:    13398 241c6db445e724bfdc4a90a08d915112
    http://security.debian.org/pool/updates/main/p/php4/php4-mhash_4.1.2-6woody3_s390.deb
      Size/MD5 checksum:     5718 0ce20e0c7ec5ebd0033948c80c0e83de
    http://security.debian.org/pool/updates/main/p/php4/php4-mysql_4.1.2-6woody3_s390.deb
      Size/MD5 checksum:    16516 ba361b632702a3f5631a6ab5c20c1ac5
    http://security.debian.org/pool/updates/main/p/php4/php4-odbc_4.1.2-6woody3_s390.deb
      Size/MD5 checksum:    22412 791fceef4fd75c5396edd44bfbf51a12
    http://security.debian.org/pool/updates/main/p/php4/php4-recode_4.1.2-6woody3_s390.deb
      Size/MD5 checksum:     5150 6e397e89c5055883a4430e430d7096ce
    http://security.debian.org/pool/updates/main/p/php4/php4-snmp_4.1.2-6woody3_s390.deb
      Size/MD5 checksum:     7220 f3c19a03698071da41243e285c757915
    http://security.debian.org/pool/updates/main/p/php4/php4-sybase_4.1.2-6woody3_s390.deb
      Size/MD5 checksum:    14486 a3186235bcbbe9f629468340a3bda186
    http://security.debian.org/pool/updates/main/p/php4/php4-xslt_4.1.2-6woody3_s390.deb
      Size/MD5 checksum:    25818 3deb4e412756a398ef82f61583820f73

  Sun Sparc architecture:

    http://security.debian.org/pool/updates/main/p/php4/caudium-php4_4.1.2-6woody3_sparc.deb
      Size/MD5 checksum:   629512 04a55f9b6b6fa390f6dd33b3fb05fddd
    http://security.debian.org/pool/updates/main/p/php4/php4_4.1.2-6woody3_sparc.deb
      Size/MD5 checksum:   614748 175f33cfccfb1c8837b420e7a2a7173a
    http://security.debian.org/pool/updates/main/p/php4/php4-cgi_4.1.2-6woody3_sparc.deb
      Size/MD5 checksum:  1032888 3445149790f97d5ed245fa7cd8bd0be1
    http://security.debian.org/pool/updates/main/p/php4/php4-curl_4.1.2-6woody3_sparc.deb
      Size/MD5 checksum:    13466 f31fb8b7b67f1ae9fc23e9cd27790b2e
    http://security.debian.org/pool/updates/main/p/php4/php4-domxml_4.1.2-6woody3_sparc.deb
      Size/MD5 checksum:    18692 75cbde18dc595c98aa6aa7825a6b38a7
    http://security.debian.org/pool/updates/main/p/php4/php4-gd_4.1.2-6woody3_sparc.deb
      Size/MD5 checksum:    25858 99e3ec3aea9954e68e8d04c1480349e7
    http://security.debian.org/pool/updates/main/p/php4/php4-imap_4.1.2-6woody3_sparc.deb
      Size/MD5 checksum:    33222 245d5d3427be14d154c866369141ea1b
    http://security.debian.org/pool/updates/main/p/php4/php4-ldap_4.1.2-6woody3_sparc.deb
      Size/MD5 checksum:    18176 9edfb0b7cc3e89fe12ab1660ad4f55bd
    http://security.debian.org/pool/updates/main/p/php4/php4-mcal_4.1.2-6woody3_sparc.deb
      Size/MD5 checksum:    17562 0bd7650f0b672b07c0005890d7268f0e
    http://security.debian.org/pool/updates/main/p/php4/php4-mhash_4.1.2-6woody3_sparc.deb
      Size/MD5 checksum:     5766 3e17b6f1551667f1bcaf0ddfea0dc2f5
    http://security.debian.org/pool/updates/main/p/php4/php4-mysql_4.1.2-6woody3_sparc.deb
      Size/MD5 checksum:    18324 65e2e666700a491229b9e6c900b33c29
    http://security.debian.org/pool/updates/main/p/php4/php4-odbc_4.1.2-6woody3_sparc.deb
      Size/MD5 checksum:    22310 dd289592bd70493fc15019ddbe11c8b4
    http://security.debian.org/pool/updates/main/p/php4/php4-recode_4.1.2-6woody3_sparc.deb
      Size/MD5 checksum:     7686 dcaba12ff607139764c55dd5bfbb00c6
    http://security.debian.org/pool/updates/main/p/php4/php4-snmp_4.1.2-6woody3_sparc.deb
      Size/MD5 checksum:     6782 8fcb452b58f08b6b61e348fb16a7331a
    http://security.debian.org/pool/updates/main/p/php4/php4-sybase_4.1.2-6woody3_sparc.deb
      Size/MD5 checksum:    13640 820d5a07ca057ef6039fa754b1cd7742
    http://security.debian.org/pool/updates/main/p/php4/php4-xslt_4.1.2-6woody3_sparc.deb
      Size/MD5 checksum:    22838 a39d84fda1e7fa4083be294179606617

You may use an automated update by adding the resources from the
footer to the proper configuration.

- ---------------------------------------------------------------------------------
For apt-get: deb http://security.debian.org/ stable/updates main
For dpkg-ftp: ftp://security.debian.org/debian-security dists/stable/updates/main
Mailing list: debian-security-announce@lists.debian.org
Package info: `apt-cache show <pkg>' and http://packages.debian.org/<pkg>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.2 (GNU/Linux)

iD8DBQE/FeLVArxCt0PiXR4RAjqNAKC8P5X5ST1cSxY7Ey+hmUhDKF6JhwCeMCBS
xLMLeoCvaxaNY/AZeAwb1l0=
=y5lk
-----END PGP SIGNATURE-----


-- 
To UNSUBSCRIBE, email to debian-security-announce-request@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org

--- End Message ---