[SECURITY] [DSA 729-1] New PHP4 packages fix denial of service

To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: [SECURITY] [DSA 729-1] New PHP4 packages fix denial of service
From: joey@xxxxxxxxxxxx (Martin Schulze)
Date: Thu, 26 May 2005 13:27:49 +0200 (CEST)
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mail-followup-to: bugtraq@xxxxxxxxxxxxxxxxx
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm
Old-return-path: <joey@xxxxxxxxxxxx>
Priority: urgent
Reply-to: listadmin@xxxxxxxxxxxxxxxxx
Resent-cc: recipient list not shown: ;
Resent-date: Thu, 26 May 2005 06:37:20 -0500 (CDT)
Resent-from: list@xxxxxxxxxxxxxxxxx (SmartList)
Resent-message-id: <xng1yD.A.2PF.wTblCB@murphy>
User-agent: dsa-launch $Revision: 1.17 $
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- --------------------------------------------------------------------------
Debian Security Advisory DSA 729-1                     security@xxxxxxxxxx
http://www.debian.org/security/                             Martin Schulze
May 26th, 2005                          http://www.debian.org/security/faq
- --------------------------------------------------------------------------

Package        : php4
Vulnerability  : missing input sanitising
Problem-Type   : local (remote)
Debian-specific: no
CVE ID         : CAN-2005-0525
Debian Bug     : 302701

An iDEFENSE researcher discovered two problems in the image processing
functions of PHP, a server-side, HTML-embedded scripting language, of
which one is present in woody as well.  When reading a JPEG image, PHP
can be tricked into an endless loop due to insufficient input
validation.

For the stable distribution (woody) this problem has been fixed in
version 4.1.2-7.woody4.

For the testing distribution (sarge) these problems have been fixed in
version 4.3.10-10.

For the unstable distribution (sid) these problems have been fixed in
version 4.3.10-10.

We recommend that you upgrade your php4 packages.


Upgrade Instructions
- --------------------

wget url
        will fetch the file for you
dpkg -i file.deb
        will install the referenced file.

If you are using the apt-get package manager, use the line for
sources.list as given below:

apt-get update
        will update the internal database
apt-get upgrade
        will install corrected packages

You may use an automated update by adding the resources from the
footer to the proper configuration.


Debian GNU/Linux 3.0 alias woody
- --------------------------------

  Source archives:

    http://security.debian.org/pool/updates/main/p/php4/php4_4.1.2-7.woody4.dsc
      Size/MD5 checksum:     1492 091ac6dee884b6a1075ba98f79ff27f4
    
http://security.debian.org/pool/updates/main/p/php4/php4_4.1.2-7.woody4.diff.gz
      Size/MD5 checksum:   102098 a1e8c7c5d254573c9e7a52b9d71167c9
    http://security.debian.org/pool/updates/main/p/php4/php4_4.1.2.orig.tar.gz
      Size/MD5 checksum:  3346579 37e67552bec20e6f02d52e14a11aa269

  Architecture independent components:

    
http://security.debian.org/pool/updates/main/p/php4/php4-dev_4.1.2-7.woody4_all.deb
      Size/MD5 checksum:   208752 fb6a856d6ac48c2295a9bcf20dfb5fc9
    
http://security.debian.org/pool/updates/main/p/php4/php4-pear_4.1.2-7.woody4_all.deb
      Size/MD5 checksum:   223280 e2b424c23eb34bd712f0ccea862edf73

  Alpha architecture:

    
http://security.debian.org/pool/updates/main/p/php4/caudium-php4_4.1.2-7.woody4_alpha.deb
      Size/MD5 checksum:   713800 4ec13de24f707393e2702a3c50135b1f
    
http://security.debian.org/pool/updates/main/p/php4/php4_4.1.2-7.woody4_alpha.deb
      Size/MD5 checksum:   695900 006d51775403689bd41d84fd9990059e
    
http://security.debian.org/pool/updates/main/p/php4/php4-cgi_4.1.2-7.woody4_alpha.deb
      Size/MD5 checksum:  1295084 3505ba0a13c37edbc6e4745c823c779c
    
http://security.debian.org/pool/updates/main/p/php4/php4-curl_4.1.2-7.woody4_alpha.deb
      Size/MD5 checksum:    15096 e0bc46b415d14f03c1940358ad3c6336
    
http://security.debian.org/pool/updates/main/p/php4/php4-domxml_4.1.2-7.woody4_alpha.deb
      Size/MD5 checksum:    21262 c1a517eff4eaedbf7b84c47f5ff90c98
    
http://security.debian.org/pool/updates/main/p/php4/php4-gd_4.1.2-7.woody4_alpha.deb
      Size/MD5 checksum:    29278 bf1c2cc50200ea95b4ef3211c1b4e57a
    
http://security.debian.org/pool/updates/main/p/php4/php4-imap_4.1.2-7.woody4_alpha.deb
      Size/MD5 checksum:    33326 d9b107ef11d6fcead95ecc9f587a1d81
    
http://security.debian.org/pool/updates/main/p/php4/php4-ldap_4.1.2-7.woody4_alpha.deb
      Size/MD5 checksum:    18396 fde0676850a97e15b3101f6a57cc6e12
    
http://security.debian.org/pool/updates/main/p/php4/php4-mcal_4.1.2-7.woody4_alpha.deb
      Size/MD5 checksum:    15438 5e2a68b415a6045f13639e1a2755928e
    
http://security.debian.org/pool/updates/main/p/php4/php4-mhash_4.1.2-7.woody4_alpha.deb
      Size/MD5 checksum:     6120 2e84096c7693d718e8602c7bf8124450
    
http://security.debian.org/pool/updates/main/p/php4/php4-mysql_4.1.2-7.woody4_alpha.deb
      Size/MD5 checksum:    19230 d018aee148b0b10b60b9bb4e35e1c816
    
http://security.debian.org/pool/updates/main/p/php4/php4-odbc_4.1.2-7.woody4_alpha.deb
      Size/MD5 checksum:    25546 9d360fd1e04d13d96aa625cafa608a78
    
http://security.debian.org/pool/updates/main/p/php4/php4-recode_4.1.2-7.woody4_alpha.deb
      Size/MD5 checksum:     5428 a1361eab6ef2da0c5763ee09ee8ac7e6
    
http://security.debian.org/pool/updates/main/p/php4/php4-snmp_4.1.2-7.woody4_alpha.deb
      Size/MD5 checksum:     7362 c6e0255b96451d8325d6dbb4df63be1d
    
http://security.debian.org/pool/updates/main/p/php4/php4-sybase_4.1.2-7.woody4_alpha.deb
      Size/MD5 checksum:    16302 eccdd9c5462318ac9ea624f84f5491f7
    
http://security.debian.org/pool/updates/main/p/php4/php4-xslt_4.1.2-7.woody4_alpha.deb
      Size/MD5 checksum:    29366 0de9a1c531228342812bd4b0b6d6bf47

  ARM architecture:

    
http://security.debian.org/pool/updates/main/p/php4/caudium-php4_4.1.2-7.woody4_arm.deb
      Size/MD5 checksum:   653234 58ef7d07715a98dbeb696485200b3008
    
http://security.debian.org/pool/updates/main/p/php4/php4_4.1.2-7.woody4_arm.deb
      Size/MD5 checksum:   627276 0cf683dcc9955162a65a8a763e1a78b3
    
http://security.debian.org/pool/updates/main/p/php4/php4-cgi_4.1.2-7.woody4_arm.deb
      Size/MD5 checksum:  1077152 7304c423ff49b9ff7e9e7322bb711a4d
    
http://security.debian.org/pool/updates/main/p/php4/php4-curl_4.1.2-7.woody4_arm.deb
      Size/MD5 checksum:    14024 4520fe4b52431231932445f603698e77
    
http://security.debian.org/pool/updates/main/p/php4/php4-domxml_4.1.2-7.woody4_arm.deb
      Size/MD5 checksum:    19916 1ac442195ac1732d0b9e705ce2cb2d6c
    
http://security.debian.org/pool/updates/main/p/php4/php4-gd_4.1.2-7.woody4_arm.deb
      Size/MD5 checksum:    26970 8c1fd64054b348fc8d5159d7d3930234
    
http://security.debian.org/pool/updates/main/p/php4/php4-imap_4.1.2-7.woody4_arm.deb
      Size/MD5 checksum:    32866 7d8e90baf44d0716d4695ee51769ada6
    
http://security.debian.org/pool/updates/main/p/php4/php4-ldap_4.1.2-7.woody4_arm.deb
      Size/MD5 checksum:    16514 f8a675512ee840722b896e748587e034
    
http://security.debian.org/pool/updates/main/p/php4/php4-mcal_4.1.2-7.woody4_arm.deb
      Size/MD5 checksum:    15342 ff829618f80adcfa949f7b6cdff8ea0a
    
http://security.debian.org/pool/updates/main/p/php4/php4-mhash_4.1.2-7.woody4_arm.deb
      Size/MD5 checksum:     5586 971fc98a8a0db11e65a4b2792439641e
    
http://security.debian.org/pool/updates/main/p/php4/php4-mysql_4.1.2-7.woody4_arm.deb
      Size/MD5 checksum:    15876 482671161bec36a7bebbf8ddd7754b07
    
http://security.debian.org/pool/updates/main/p/php4/php4-odbc_4.1.2-7.woody4_arm.deb
      Size/MD5 checksum:    24604 57f1013e7d17ed1659596e41e28f269e
    
http://security.debian.org/pool/updates/main/p/php4/php4-recode_4.1.2-7.woody4_arm.deb
      Size/MD5 checksum:     5136 4104f1152acc5c05209638e7fc1ac621
    
http://security.debian.org/pool/updates/main/p/php4/php4-snmp_4.1.2-7.woody4_arm.deb
      Size/MD5 checksum:     6992 cad13fd763259c65cbf8baf1f17e9cec
    
http://security.debian.org/pool/updates/main/p/php4/php4-sybase_4.1.2-7.woody4_arm.deb
      Size/MD5 checksum:    14382 453064b3d14c0208c15fe744ca20a450
    
http://security.debian.org/pool/updates/main/p/php4/php4-xslt_4.1.2-7.woody4_arm.deb
      Size/MD5 checksum:    11710 8008019f5fd43a071966f01da153b6a2

  Intel IA-32 architecture:

    
http://security.debian.org/pool/updates/main/p/php4/caudium-php4_4.1.2-7.woody4_i386.deb
      Size/MD5 checksum:   598388 5738d8f91888116d57dafba2c5453448
    
http://security.debian.org/pool/updates/main/p/php4/php4_4.1.2-7.woody4_i386.deb
      Size/MD5 checksum:   582276 6bfa0d18944e1de90ea8e2cacebb1228
    
http://security.debian.org/pool/updates/main/p/php4/php4-cgi_4.1.2-7.woody4_i386.deb
      Size/MD5 checksum:   991148 0cc26e1f9da2765e2068323c819f4c9a
    
http://security.debian.org/pool/updates/main/p/php4/php4-curl_4.1.2-7.woody4_i386.deb
      Size/MD5 checksum:    12372 27606e716bbdb976891ad7ef120fd171
    
http://security.debian.org/pool/updates/main/p/php4/php4-domxml_4.1.2-7.woody4_i386.deb
      Size/MD5 checksum:    17654 5a888986779cd90f4e157781599cb1db
    
http://security.debian.org/pool/updates/main/p/php4/php4-gd_4.1.2-7.woody4_i386.deb
      Size/MD5 checksum:    24496 b2d8d9bca26a0107217b1b92ae1b9654
    
http://security.debian.org/pool/updates/main/p/php4/php4-imap_4.1.2-7.woody4_i386.deb
      Size/MD5 checksum:   376808 fd96088dbb4e78da8b1677f4bdd5001d
    
http://security.debian.org/pool/updates/main/p/php4/php4-ldap_4.1.2-7.woody4_i386.deb
      Size/MD5 checksum:    14788 49ea645a36ac2e7f1206d638e700d435
    
http://security.debian.org/pool/updates/main/p/php4/php4-mcal_4.1.2-7.woody4_i386.deb
      Size/MD5 checksum:    13872 97908d0c31ecd63cfe2a25b18492ad3b
    
http://security.debian.org/pool/updates/main/p/php4/php4-mhash_4.1.2-7.woody4_i386.deb
      Size/MD5 checksum:     5614 39a871930623ac8e7e0d6ed8dcee6ed0
    
http://security.debian.org/pool/updates/main/p/php4/php4-mysql_4.1.2-7.woody4_i386.deb
      Size/MD5 checksum:    15068 4ace94264e5a0344487af2812a8ea1a9
    
http://security.debian.org/pool/updates/main/p/php4/php4-odbc_4.1.2-7.woody4_i386.deb
      Size/MD5 checksum:    20802 daac429f27d861a7f2709efedd1e33d4
    
http://security.debian.org/pool/updates/main/p/php4/php4-recode_4.1.2-7.woody4_i386.deb
      Size/MD5 checksum:     4940 165eec37c5adcc4e5c22722b3a62c045
    
http://security.debian.org/pool/updates/main/p/php4/php4-snmp_4.1.2-7.woody4_i386.deb
      Size/MD5 checksum:     6656 847abf6170ddbec56e6e4c8203f9f7b2
    
http://security.debian.org/pool/updates/main/p/php4/php4-sybase_4.1.2-7.woody4_i386.deb
      Size/MD5 checksum:    13352 924eea69594e0ce56fc067835bdfe5b1
    
http://security.debian.org/pool/updates/main/p/php4/php4-xslt_4.1.2-7.woody4_i386.deb
      Size/MD5 checksum:    24600 e192e146dc9fe892551d820a444e74e7

  Intel IA-64 architecture:

    
http://security.debian.org/pool/updates/main/p/php4/caudium-php4_4.1.2-7.woody4_ia64.deb
      Size/MD5 checksum:   920632 8aa11ea5d0dacb79e8a5eb0004e14cfb
    
http://security.debian.org/pool/updates/main/p/php4/php4_4.1.2-7.woody4_ia64.deb
      Size/MD5 checksum:   890332 a1ca03e627ab2347d5c45101aabeb3e3
    
http://security.debian.org/pool/updates/main/p/php4/php4-cgi_4.1.2-7.woody4_ia64.deb
      Size/MD5 checksum:  1602092 e48cf6892a1c15498f1bef13d7b82dab
    
http://security.debian.org/pool/updates/main/p/php4/php4-curl_4.1.2-7.woody4_ia64.deb
      Size/MD5 checksum:    18346 5adaa6ec756d21fb460e9dba1dddd428
    
http://security.debian.org/pool/updates/main/p/php4/php4-domxml_4.1.2-7.woody4_ia64.deb
      Size/MD5 checksum:    26190 213128ba997a18d418a70bfbbf205cdf
    
http://security.debian.org/pool/updates/main/p/php4/php4-gd_4.1.2-7.woody4_ia64.deb
      Size/MD5 checksum:    37884 daf2e1f774094cddd176a368ff5edf36
    
http://security.debian.org/pool/updates/main/p/php4/php4-imap_4.1.2-7.woody4_ia64.deb
      Size/MD5 checksum:    43994 7a83bf4bcd0f77bf0fa3299070ee1202
    
http://security.debian.org/pool/updates/main/p/php4/php4-ldap_4.1.2-7.woody4_ia64.deb
      Size/MD5 checksum:    22554 88cafda191ebb001f99916038a22db18
    
http://security.debian.org/pool/updates/main/p/php4/php4-mcal_4.1.2-7.woody4_ia64.deb
      Size/MD5 checksum:    20074 eaed51e0f3ac95b5be70359b18553030
    
http://security.debian.org/pool/updates/main/p/php4/php4-mhash_4.1.2-7.woody4_ia64.deb
      Size/MD5 checksum:     7560 a25ebf9bfd2e87fe90677cfde5103ebf
    
http://security.debian.org/pool/updates/main/p/php4/php4-mysql_4.1.2-7.woody4_ia64.deb
      Size/MD5 checksum:    22474 23b5e298fa0c6e302df8ff54882f0335
    
http://security.debian.org/pool/updates/main/p/php4/php4-odbc_4.1.2-7.woody4_ia64.deb
      Size/MD5 checksum:    32774 1e4c6abb56b74c7b8d7b53a75b6f2379
    
http://security.debian.org/pool/updates/main/p/php4/php4-recode_4.1.2-7.woody4_ia64.deb
      Size/MD5 checksum:     6342 73a5abf536df919e7a2224372193ddee
    
http://security.debian.org/pool/updates/main/p/php4/php4-snmp_4.1.2-7.woody4_ia64.deb
      Size/MD5 checksum:     8678 99ee6ed8fab5ae95f86c3d102283a48c
    
http://security.debian.org/pool/updates/main/p/php4/php4-sybase_4.1.2-7.woody4_ia64.deb
      Size/MD5 checksum:    20442 ff75611ee6a012800a8ba6b2eeddea94
    
http://security.debian.org/pool/updates/main/p/php4/php4-xslt_4.1.2-7.woody4_ia64.deb
      Size/MD5 checksum:    40610 3b1532952063684d9efc3cc3185c78ad

  HP Precision architecture:

    
http://security.debian.org/pool/updates/main/p/php4/caudium-php4_4.1.2-7.woody4_hppa.deb
      Size/MD5 checksum:   757956 bcf38991f08c3c387045c9c06e267508
    
http://security.debian.org/pool/updates/main/p/php4/php4_4.1.2-7.woody4_hppa.deb
      Size/MD5 checksum:   735284 532f7664a7911049d16a0fc22c5fc6a4
    
http://security.debian.org/pool/updates/main/p/php4/php4-cgi_4.1.2-7.woody4_hppa.deb
      Size/MD5 checksum:  1213398 beb97f935cc44ec5f0e88f749e86d98a
    
http://security.debian.org/pool/updates/main/p/php4/php4-curl_4.1.2-7.woody4_hppa.deb
      Size/MD5 checksum:    15620 d9cd018c079c9eaf91f9f528cea2de5a
    
http://security.debian.org/pool/updates/main/p/php4/php4-domxml_4.1.2-7.woody4_hppa.deb
      Size/MD5 checksum:    22760 21ae44f12a9d2b1f6eacf8fe5c5a0c86
    
http://security.debian.org/pool/updates/main/p/php4/php4-gd_4.1.2-7.woody4_hppa.deb
      Size/MD5 checksum:    31498 58a37820238c6d840b941d882869f311
    
http://security.debian.org/pool/updates/main/p/php4/php4-imap_4.1.2-7.woody4_hppa.deb
      Size/MD5 checksum:    37484 7beeae0f506c69214a69700d991bd9bb
    
http://security.debian.org/pool/updates/main/p/php4/php4-ldap_4.1.2-7.woody4_hppa.deb
      Size/MD5 checksum:    19024 c4446fd5c5d108bb409d9e2f11f5c144
    
http://security.debian.org/pool/updates/main/p/php4/php4-mcal_4.1.2-7.woody4_hppa.deb
      Size/MD5 checksum:    17324 df4b4bac429c63433c0782155d3f6ef3
    
http://security.debian.org/pool/updates/main/p/php4/php4-mhash_4.1.2-7.woody4_hppa.deb
      Size/MD5 checksum:     6064 0e15ff1ee3bf2857174de9de0042d5ed
    
http://security.debian.org/pool/updates/main/p/php4/php4-mysql_4.1.2-7.woody4_hppa.deb
      Size/MD5 checksum:    17960 a7f3f399d8c71c33162f8c85e36efb12
    
http://security.debian.org/pool/updates/main/p/php4/php4-odbc_4.1.2-7.woody4_hppa.deb
      Size/MD5 checksum:    26668 b8c41054cf754a594120e3be1d07d778
    
http://security.debian.org/pool/updates/main/p/php4/php4-recode_4.1.2-7.woody4_hppa.deb
      Size/MD5 checksum:     5574 d5e74dc69968fcc8965f5be0e07571c1
    
http://security.debian.org/pool/updates/main/p/php4/php4-snmp_4.1.2-7.woody4_hppa.deb
      Size/MD5 checksum:     7296 aba6030367971404556c719dbb7faf75
    
http://security.debian.org/pool/updates/main/p/php4/php4-sybase_4.1.2-7.woody4_hppa.deb
      Size/MD5 checksum:    16546 f7ee694c6ec1ae6fb2ef734a1e2d75a5
    
http://security.debian.org/pool/updates/main/p/php4/php4-xslt_4.1.2-7.woody4_hppa.deb
      Size/MD5 checksum:    26912 77f5b3956a15af8dcefcd061af130648

  Motorola 680x0 architecture:

    
http://security.debian.org/pool/updates/main/p/php4/caudium-php4_4.1.2-7.woody4_m68k.deb
      Size/MD5 checksum:   581524 9843e1dc1c251d4dc43a8bce4492d87c
    
http://security.debian.org/pool/updates/main/p/php4/php4_4.1.2-7.woody4_m68k.deb
      Size/MD5 checksum:   573804 909cb968f7f7260689ba05e5e9d8800c
    
http://security.debian.org/pool/updates/main/p/php4/php4-cgi_4.1.2-7.woody4_m68k.deb
      Size/MD5 checksum:   933494 86525198243ca29e1adada766dc7e11c
    
http://security.debian.org/pool/updates/main/p/php4/php4-curl_4.1.2-7.woody4_m68k.deb
      Size/MD5 checksum:    13414 66cd0203a11b22041f9f86f1caa06b60
    
http://security.debian.org/pool/updates/main/p/php4/php4-domxml_4.1.2-7.woody4_m68k.deb
      Size/MD5 checksum:    18600 b7cee3613df26c9700920ac80994a732
    
http://security.debian.org/pool/updates/main/p/php4/php4-gd_4.1.2-7.woody4_m68k.deb
      Size/MD5 checksum:    23838 e05597c3fb748f7beb39fe8aee5abbc2
    
http://security.debian.org/pool/updates/main/p/php4/php4-imap_4.1.2-7.woody4_m68k.deb
      Size/MD5 checksum:    27878 f8b0ad6cb4ebf328c6bafde77d6f11cd
    
http://security.debian.org/pool/updates/main/p/php4/php4-ldap_4.1.2-7.woody4_m68k.deb
      Size/MD5 checksum:    14606 c3c24fcb3993ba00e5b662492f7edf7d
    
http://security.debian.org/pool/updates/main/p/php4/php4-mcal_4.1.2-7.woody4_m68k.deb
      Size/MD5 checksum:    14032 60ca8d10c4d22ad929551289865769f1
    
http://security.debian.org/pool/updates/main/p/php4/php4-mhash_4.1.2-7.woody4_m68k.deb
      Size/MD5 checksum:     5414 001fdeb5f16b1719760338d7fdca6f56
    
http://security.debian.org/pool/updates/main/p/php4/php4-mysql_4.1.2-7.woody4_m68k.deb
      Size/MD5 checksum:    15064 b121d435e4576ced2e75e8a0701e307e
    
http://security.debian.org/pool/updates/main/p/php4/php4-odbc_4.1.2-7.woody4_m68k.deb
      Size/MD5 checksum:    20696 1e206c3f23b289bae29f5272be34b418
    
http://security.debian.org/pool/updates/main/p/php4/php4-recode_4.1.2-7.woody4_m68k.deb
      Size/MD5 checksum:     4936 4d4bee9f1be5385b1a0ac4d27e504f5f
    
http://security.debian.org/pool/updates/main/p/php4/php4-snmp_4.1.2-7.woody4_m68k.deb
      Size/MD5 checksum:     6526 a282ff32ad3252af7d66fee039b8290e
    
http://security.debian.org/pool/updates/main/p/php4/php4-sybase_4.1.2-7.woody4_m68k.deb
      Size/MD5 checksum:    13372 027449204ab78d8a2715a0716301c87c
    
http://security.debian.org/pool/updates/main/p/php4/php4-xslt_4.1.2-7.woody4_m68k.deb
      Size/MD5 checksum:    24986 c4bc8e6adac5afc0db828e8282434852

  Big endian MIPS architecture:

    
http://security.debian.org/pool/updates/main/p/php4/caudium-php4_4.1.2-7.woody4_mips.deb
      Size/MD5 checksum:   616040 d105c6666d950a41f48d81995bc46fdd
    
http://security.debian.org/pool/updates/main/p/php4/php4_4.1.2-7.woody4_mips.deb
      Size/MD5 checksum:   607970 811c47b47eb009c50eb4331012e7d343
    
http://security.debian.org/pool/updates/main/p/php4/php4-cgi_4.1.2-7.woody4_mips.deb
      Size/MD5 checksum:  1096516 baf181c0191d24738bffd81317c884c7
    
http://security.debian.org/pool/updates/main/p/php4/php4-curl_4.1.2-7.woody4_mips.deb
      Size/MD5 checksum:    12106 c2756f49f4ebc419157751acc85de5ac
    
http://security.debian.org/pool/updates/main/p/php4/php4-domxml_4.1.2-7.woody4_mips.deb
      Size/MD5 checksum:    16834 09c2eef4615e055a4267a386db2db4c1
    
http://security.debian.org/pool/updates/main/p/php4/php4-gd_4.1.2-7.woody4_mips.deb
      Size/MD5 checksum:    24754 f09691f06ea0e8c97a3aafe0d8a350fd
    
http://security.debian.org/pool/updates/main/p/php4/php4-imap_4.1.2-7.woody4_mips.deb
      Size/MD5 checksum:    27346 cf6daaf3b40d1484cc772ee0b44c7962
    
http://security.debian.org/pool/updates/main/p/php4/php4-ldap_4.1.2-7.woody4_mips.deb
      Size/MD5 checksum:    15028 d8a4b0a6ba4a95fac0ffa672f58e0680
    
http://security.debian.org/pool/updates/main/p/php4/php4-mcal_4.1.2-7.woody4_mips.deb
      Size/MD5 checksum:    13028 b0ae6f2de49698d651d1becb16c60894
    
http://security.debian.org/pool/updates/main/p/php4/php4-mhash_4.1.2-7.woody4_mips.deb
      Size/MD5 checksum:     5628 6da12aec085fd9726fcac31ce2aa5ff9
    
http://security.debian.org/pool/updates/main/p/php4/php4-mysql_4.1.2-7.woody4_mips.deb
      Size/MD5 checksum:    15232 99e1914514b5ca8ac9ced0d5f39a6086
    
http://security.debian.org/pool/updates/main/p/php4/php4-odbc_4.1.2-7.woody4_mips.deb
      Size/MD5 checksum:    20766 df9854b0f2bb4d57f806adbb6928fb50
    
http://security.debian.org/pool/updates/main/p/php4/php4-recode_4.1.2-7.woody4_mips.deb
      Size/MD5 checksum:     5078 d5d25a18a66d5f1cafa9569cdd2bab83
    
http://security.debian.org/pool/updates/main/p/php4/php4-snmp_4.1.2-7.woody4_mips.deb
      Size/MD5 checksum:     6582 716a0aa997fdb3d0d31f3c316b9c005b
    
http://security.debian.org/pool/updates/main/p/php4/php4-sybase_4.1.2-7.woody4_mips.deb
      Size/MD5 checksum:    14102 a5599ccefdbce770bd47cc55cacf657f
    
http://security.debian.org/pool/updates/main/p/php4/php4-xslt_4.1.2-7.woody4_mips.deb
      Size/MD5 checksum:    25470 76c5a8a59fbb78ebf9d3e19f8264dd9b

  Little endian MIPS architecture:

    
http://security.debian.org/pool/updates/main/p/php4/caudium-php4_4.1.2-7.woody4_mipsel.deb
      Size/MD5 checksum:   610368 715edb9ea55f779ff1f2d2991e2d2e68
    
http://security.debian.org/pool/updates/main/p/php4/php4_4.1.2-7.woody4_mipsel.deb
      Size/MD5 checksum:   603554 21c78208119437cc7247d272471388b3
    
http://security.debian.org/pool/updates/main/p/php4/php4-cgi_4.1.2-7.woody4_mipsel.deb
      Size/MD5 checksum:  1090646 dc0ed38113bee8b1470d669e33d04a08
    
http://security.debian.org/pool/updates/main/p/php4/php4-curl_4.1.2-7.woody4_mipsel.deb
      Size/MD5 checksum:    12012 9791ee02b1cb69c5b4c4c9b2b858cc52
    
http://security.debian.org/pool/updates/main/p/php4/php4-domxml_4.1.2-7.woody4_mipsel.deb
      Size/MD5 checksum:    16706 fa82302dba1ffd70d125b1895790ab33
    
http://security.debian.org/pool/updates/main/p/php4/php4-gd_4.1.2-7.woody4_mipsel.deb
      Size/MD5 checksum:    24548 19388eccf57569995a6a2cfb1633b4b9
    
http://security.debian.org/pool/updates/main/p/php4/php4-imap_4.1.2-7.woody4_mipsel.deb
      Size/MD5 checksum:    27100 c96d339e6c2dc2922bd735d0fb618259
    
http://security.debian.org/pool/updates/main/p/php4/php4-ldap_4.1.2-7.woody4_mipsel.deb
      Size/MD5 checksum:    14932 665b9647eb0a23e9b3409929cf5f6b32
    
http://security.debian.org/pool/updates/main/p/php4/php4-mcal_4.1.2-7.woody4_mipsel.deb
      Size/MD5 checksum:    12900 5874e3c0fd8824134c3f7fc8229c1d37
    
http://security.debian.org/pool/updates/main/p/php4/php4-mhash_4.1.2-7.woody4_mipsel.deb
      Size/MD5 checksum:     5578 1235ac2e711674390f3adf8a73e6da85
    
http://security.debian.org/pool/updates/main/p/php4/php4-mysql_4.1.2-7.woody4_mipsel.deb
      Size/MD5 checksum:    15096 026b16589fc108243b8ded6c6b3d0b58
    
http://security.debian.org/pool/updates/main/p/php4/php4-odbc_4.1.2-7.woody4_mipsel.deb
      Size/MD5 checksum:    20640 611378e05dd1de2c01b46471397cc9e7
    
http://security.debian.org/pool/updates/main/p/php4/php4-recode_4.1.2-7.woody4_mipsel.deb
      Size/MD5 checksum:     5032 2a5a3ba21e564324c29b6124c45cc588
    
http://security.debian.org/pool/updates/main/p/php4/php4-snmp_4.1.2-7.woody4_mipsel.deb
      Size/MD5 checksum:     6498 9cd9e85276f94ae8f28ad5c966706418
    
http://security.debian.org/pool/updates/main/p/php4/php4-sybase_4.1.2-7.woody4_mipsel.deb
      Size/MD5 checksum:    14054 ee97cc4bcd3791ebf7119f70c12ac49c
    
http://security.debian.org/pool/updates/main/p/php4/php4-xslt_4.1.2-7.woody4_mipsel.deb
      Size/MD5 checksum:    25228 c2b53084a2ff413bfe4a6d287e0c502d

  PowerPC architecture:

    
http://security.debian.org/pool/updates/main/p/php4/caudium-php4_4.1.2-7.woody4_powerpc.deb
      Size/MD5 checksum:   653596 f7da933873284822c8ce5c7a02ead998
    
http://security.debian.org/pool/updates/main/p/php4/php4_4.1.2-7.woody4_powerpc.deb
      Size/MD5 checksum:   638538 f9fa5ecdc174259f09db22fa76a0bd87
    
http://security.debian.org/pool/updates/main/p/php4/php4-cgi_4.1.2-7.woody4_powerpc.deb
      Size/MD5 checksum:  1071756 bbb2225dd4cea96144bab9ee1b369c95
    
http://security.debian.org/pool/updates/main/p/php4/php4-curl_4.1.2-7.woody4_powerpc.deb
      Size/MD5 checksum:    13686 a0eb650938a7d67c8aafe1160a0a9054
    
http://security.debian.org/pool/updates/main/p/php4/php4-domxml_4.1.2-7.woody4_powerpc.deb
      Size/MD5 checksum:    20934 d9b45f55c0a85a7d5b19b9e739276c46
    
http://security.debian.org/pool/updates/main/p/php4/php4-gd_4.1.2-7.woody4_powerpc.deb
      Size/MD5 checksum:    28126 6729cabc8d65fa831705cbe41c3143bc
    
http://security.debian.org/pool/updates/main/p/php4/php4-imap_4.1.2-7.woody4_powerpc.deb
      Size/MD5 checksum:    31318 00c69872430143e1db689aa514b16c76
    
http://security.debian.org/pool/updates/main/p/php4/php4-ldap_4.1.2-7.woody4_powerpc.deb
      Size/MD5 checksum:    16294 98ffeffb6395698e164799fff4d13afb
    
http://security.debian.org/pool/updates/main/p/php4/php4-mcal_4.1.2-7.woody4_powerpc.deb
      Size/MD5 checksum:    15038 852192452f2e20fdd350fd2710f835dd
    
http://security.debian.org/pool/updates/main/p/php4/php4-mhash_4.1.2-7.woody4_powerpc.deb
      Size/MD5 checksum:     5634 2bdf0a7983757b22900a4e895a9607f4
    
http://security.debian.org/pool/updates/main/p/php4/php4-mysql_4.1.2-7.woody4_powerpc.deb
      Size/MD5 checksum:    16072 9ca1f73ba6c0e12284b4951ca7601e7f
    
http://security.debian.org/pool/updates/main/p/php4/php4-odbc_4.1.2-7.woody4_powerpc.deb
      Size/MD5 checksum:    23778 194360089d92254a5d4b6d55a314a440
    
http://security.debian.org/pool/updates/main/p/php4/php4-recode_4.1.2-7.woody4_powerpc.deb
      Size/MD5 checksum:     5082 dedf26d508d311fd2e00cfb6bb2e610b
    
http://security.debian.org/pool/updates/main/p/php4/php4-snmp_4.1.2-7.woody4_powerpc.deb
      Size/MD5 checksum:     6556 df66bb6dd1c51d49964fff6b1578add3
    
http://security.debian.org/pool/updates/main/p/php4/php4-sybase_4.1.2-7.woody4_powerpc.deb
      Size/MD5 checksum:    14460 ce5999d62a3cfde99f1aba03f677feb9
    
http://security.debian.org/pool/updates/main/p/php4/php4-xslt_4.1.2-7.woody4_powerpc.deb
      Size/MD5 checksum:    26962 9c59a2a1d35e34f9a30775e6fe0c0df2

  IBM S/390 architecture:

    
http://security.debian.org/pool/updates/main/p/php4/caudium-php4_4.1.2-7.woody4_s390.deb
      Size/MD5 checksum:   641170 8a5eacdc43a36d8bea865352f30f4537
    
http://security.debian.org/pool/updates/main/p/php4/php4_4.1.2-7.woody4_s390.deb
      Size/MD5 checksum:   630026 583ad62958f0515f2b2379b0124c123a
    
http://security.debian.org/pool/updates/main/p/php4/php4-cgi_4.1.2-7.woody4_s390.deb
      Size/MD5 checksum:  1017616 e502830f762cd960c3eaef54de1d6c07
    
http://security.debian.org/pool/updates/main/p/php4/php4-curl_4.1.2-7.woody4_s390.deb
      Size/MD5 checksum:    13008 d3892fd0155244b8e29eebab53a3552a
    
http://security.debian.org/pool/updates/main/p/php4/php4-domxml_4.1.2-7.woody4_s390.deb
      Size/MD5 checksum:    19148 8b7e1d63b9715eaf73cc529aa788751d
    
http://security.debian.org/pool/updates/main/p/php4/php4-gd_4.1.2-7.woody4_s390.deb
      Size/MD5 checksum:    25716 348897a3de15ace73bf80624a891ac14
    
http://security.debian.org/pool/updates/main/p/php4/php4-imap_4.1.2-7.woody4_s390.deb
      Size/MD5 checksum:    29604 78a6fb67ce053396b3bd97dafb086039
    
http://security.debian.org/pool/updates/main/p/php4/php4-ldap_4.1.2-7.woody4_s390.deb
      Size/MD5 checksum:    16136 69b41f3959a160fcb7debf03d5780592
    
http://security.debian.org/pool/updates/main/p/php4/php4-mcal_4.1.2-7.woody4_s390.deb
      Size/MD5 checksum:    13404 8d9707994fd355bc351c89b85f6e848c
    
http://security.debian.org/pool/updates/main/p/php4/php4-mhash_4.1.2-7.woody4_s390.deb
      Size/MD5 checksum:     5728 74be5fcc71334f4df615a4a977c95fe7
    
http://security.debian.org/pool/updates/main/p/php4/php4-mysql_4.1.2-7.woody4_s390.deb
      Size/MD5 checksum:    16524 46b052fdf1590065c2f02e007e0c61e2
    
http://security.debian.org/pool/updates/main/p/php4/php4-odbc_4.1.2-7.woody4_s390.deb
      Size/MD5 checksum:    22414 ead7ca2e562271759ce868c15f6bc894
    
http://security.debian.org/pool/updates/main/p/php4/php4-recode_4.1.2-7.woody4_s390.deb
      Size/MD5 checksum:     5154 c013a7dba8527ba860c136743d5bc815
    
http://security.debian.org/pool/updates/main/p/php4/php4-snmp_4.1.2-7.woody4_s390.deb
      Size/MD5 checksum:     7226 8be2c2ed1679cdff97c00efd3589fe85
    
http://security.debian.org/pool/updates/main/p/php4/php4-sybase_4.1.2-7.woody4_s390.deb
      Size/MD5 checksum:    14502 6aecff55db55bcfcd59d86e3138ddefe
    
http://security.debian.org/pool/updates/main/p/php4/php4-xslt_4.1.2-7.woody4_s390.deb
      Size/MD5 checksum:    25824 18fe7b1f36338ac37a980d257e1ca405

  Sun Sparc architecture:

    
http://security.debian.org/pool/updates/main/p/php4/caudium-php4_4.1.2-7.woody4_sparc.deb
      Size/MD5 checksum:   630138 2c92df6d797bc8c37eb0f0eca5a73259
    
http://security.debian.org/pool/updates/main/p/php4/php4_4.1.2-7.woody4_sparc.deb
      Size/MD5 checksum:   615428 354beaab752d94eb883b2a4712491c21
    
http://security.debian.org/pool/updates/main/p/php4/php4-cgi_4.1.2-7.woody4_sparc.deb
      Size/MD5 checksum:  1033410 8b5216d8c46b7dc50dec6b67323867e2
    
http://security.debian.org/pool/updates/main/p/php4/php4-curl_4.1.2-7.woody4_sparc.deb
      Size/MD5 checksum:    13466 7cdc5542f7b8011eda70a383ab45c468
    
http://security.debian.org/pool/updates/main/p/php4/php4-domxml_4.1.2-7.woody4_sparc.deb
      Size/MD5 checksum:    18694 7e55bf99be85bafe1dd39f182ff1ef15
    
http://security.debian.org/pool/updates/main/p/php4/php4-gd_4.1.2-7.woody4_sparc.deb
      Size/MD5 checksum:    25862 178954ad046ff3606d40afb857be0c66
    
http://security.debian.org/pool/updates/main/p/php4/php4-imap_4.1.2-7.woody4_sparc.deb
      Size/MD5 checksum:    33224 abeddd4f10bec34c7c9bdcce92d38be7
    
http://security.debian.org/pool/updates/main/p/php4/php4-ldap_4.1.2-7.woody4_sparc.deb
      Size/MD5 checksum:    18176 2f5dcb3fd6064a25bd90653331a90f3b
    
http://security.debian.org/pool/updates/main/p/php4/php4-mcal_4.1.2-7.woody4_sparc.deb
      Size/MD5 checksum:    17560 c51a881b5ba8e7a2b80b863452b1c34d
    
http://security.debian.org/pool/updates/main/p/php4/php4-mhash_4.1.2-7.woody4_sparc.deb
      Size/MD5 checksum:     5772 1230704ff98f56666685b38ca63779aa
    
http://security.debian.org/pool/updates/main/p/php4/php4-mysql_4.1.2-7.woody4_sparc.deb
      Size/MD5 checksum:    18330 55dded111fde986acb97e0125f53916f
    
http://security.debian.org/pool/updates/main/p/php4/php4-odbc_4.1.2-7.woody4_sparc.deb
      Size/MD5 checksum:    22318 48863aeaddca7bd7621e68d106ee0bc4
    
http://security.debian.org/pool/updates/main/p/php4/php4-recode_4.1.2-7.woody4_sparc.deb
      Size/MD5 checksum:     7686 ddee8c1bce6b7f492cced0af9429103a
    
http://security.debian.org/pool/updates/main/p/php4/php4-snmp_4.1.2-7.woody4_sparc.deb
      Size/MD5 checksum:     6782 3ffdf93d63bfd51041d6cc15c97ba94b
    
http://security.debian.org/pool/updates/main/p/php4/php4-sybase_4.1.2-7.woody4_sparc.deb
      Size/MD5 checksum:    13664 0a15e40544a0d4d22fad15c2b89e898c
    
http://security.debian.org/pool/updates/main/p/php4/php4-xslt_4.1.2-7.woody4_sparc.deb
      Size/MD5 checksum:    22840 062dd3d35cb551e05dc320ee69f3a907


  These files will probably be moved into the stable distribution on
  its next update.

- 
---------------------------------------------------------------------------------
For apt-get: deb http://security.debian.org/ stable/updates main
For dpkg-ftp: ftp://security.debian.org/debian-security 
dists/stable/updates/main
Mailing list: debian-security-announce@xxxxxxxxxxxxxxxx
Package info: `apt-cache show <pkg>' and http://packages.debian.org/<pkg>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)

iD8DBQFClbK0W5ql+IAeqTIRAqc0AKCxKEubKlRCjd/g26sEfGPU+pibOgCePtEM
7rio12m3POqsKWqHeP3Ulxk=
=iFIV
-----END PGP SIGNATURE-----
Follow-Ups:
- Re: [SECURITY] [DSA 729-1] New PHP4 packages fix denial of service
  - From: John GALLET
Prev by Date: [SECURITY] [DSA 728-2] New qpopper packages fix arbitrary file overwriting
Next by Date: Alwil Software Avast Antivirus Device Driver Memory Overwrite Vulnerability
Previous by thread: [SECURITY] [DSA 728-2] New qpopper packages fix arbitrary file overwriting
Next by thread: Re: [SECURITY] [DSA 729-1] New PHP4 packages fix denial of service
Index(es):
- Date
- Thread