-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.6 Date: Thu, 12 Sep 2002 17:37:54 -0400 Source: php4 Binary: php4-cgi-snmp php4-cgi-mysql php4-snmp php4-mysql php4-dev php4-cgi-pgsql php4-cgi-imap php4-pgsql php4-imap php4-cgi-xml php4-cgi-mhash php4-cgi-ldap php4-xml php4-mhash php4-ldap php4-cgi-gd php4-cgi php4-gd php4 Architecture: alpha Version: 4.0.3pl1-0potato4 Distribution: oldstable-security Urgency: high Maintainer: Debian/Alpha Build Daemon Description: php4 - A server-side, HTML-embedded scripting language php4-cgi - A server-side, HTML-embedded scripting language php4-cgi-gd - GD module for php4-cgi php4-cgi-imap - IMAP module for php4-cgi php4-cgi-ldap - LDAP module for php4-cgi php4-cgi-mhash - MHASH module for php4-cgi php4-cgi-mysql - MySQL module for php4-cgi php4-cgi-pgsql - PostgreSQL module for php4-cgi php4-cgi-snmp - SNMP module for php4-cgi php4-cgi-xml - XML module for php4-cgi php4-gd - GD module for php4 php4-imap - IMAP module for php4 php4-ldap - LDAP module for php4 php4-mhash - MHASH module for php4 php4-mysql - MySQL module for php4 php4-pgsql - PostgreSQL module for php4 php4-snmp - SNMP module for php4 php4-xml - XML module for php4 Changes: php4 (4.0.3pl1-0potato4) oldstable-security; urgency=high . * Non-maintainer upload by Security Team * Backport security fixes from 4.2.3+ to prevent CR/LF injection - Filter control characters from To and Subject in mail() - Filter control characters from URLs passed to fopen() * Was never vulnerable to safe_mode/extra_cmd problem in mail() because extra_cmd doesn't exist yet in this version Files: 76a0ac1f943c108f28a4238723415367 520090 web optional php4_4.0.3pl1-0potato4_alpha.deb f778dc035e7ad4baf3eb94e7654856ce 29994 web optional php4-gd_4.0.3pl1-0potato4_alpha.deb f67def6934be81b202c88748fdc3d92f 33358 web optional php4-imap_4.0.3pl1-0potato4_alpha.deb b6a986b547302fdc6a604a787d1ab7dd 13986 web optional php4-ldap_4.0.3pl1-0potato4_alpha.deb c9e327ff6b10e813815e1086cd225b06 4748 web optional php4-mhash_4.0.3pl1-0potato4_alpha.deb 377c49d6674bc73c5ad5de06d3879df4 17074 web optional php4-mysql_4.0.3pl1-0potato4_alpha.deb 1c5d1a03ba6e42c9aa46446b048a80da 16948 web optional php4-pgsql_4.0.3pl1-0potato4_alpha.deb fd17ce0a1c3bf16fc331cc44096fe5eb 7062 web optional php4-snmp_4.0.3pl1-0potato4_alpha.deb eebe05f194857094a35f5f53e932734e 14708 web optional php4-xml_4.0.3pl1-0potato4_alpha.deb b8041d6976c11fbb63d0481869351658 868874 web optional php4-cgi_4.0.3pl1-0potato4_alpha.deb 9a10be425052954475a9784b6724dae4 30000 web optional php4-cgi-gd_4.0.3pl1-0potato4_alpha.deb f7a69ee5c36529e92fb28c45bf3e775c 33358 web optional php4-cgi-imap_4.0.3pl1-0potato4_alpha.deb 8bd3b9a83c179b48738f1a24fa2cf4c7 13992 web optional php4-cgi-ldap_4.0.3pl1-0potato4_alpha.deb 2f7797d7541207159af183420ea3295f 4746 web optional php4-cgi-mhash_4.0.3pl1-0potato4_alpha.deb 771971a387d238d9fee1581e310c31f4 17074 web optional php4-cgi-mysql_4.0.3pl1-0potato4_alpha.deb eca6b126a0e63cc72ce47ae48f1ae762 16948 web optional php4-cgi-pgsql_4.0.3pl1-0potato4_alpha.deb e14d2103d7a39c621885b671e0490e10 7064 web optional php4-cgi-snmp_4.0.3pl1-0potato4_alpha.deb 8ecdb15fce1db5b4edbb73458002ed34 14710 web optional php4-cgi-xml_4.0.3pl1-0potato4_alpha.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.7 (GNU/Linux) iD8DBQE9gYRgW5ql+IAeqTIRApNpAKCpj6nSlgxHY4WvVdr9jrAbzO6liQCgh875 5hwvmx5lHOGOGJoW9WWgSNM= =/hGm -----END PGP SIGNATURE-----