-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.6 Date: Thu, 12 Sep 2002 17:37:54 -0400 Source: php4 Binary: php4-cgi-snmp php4-cgi-mysql php4-snmp php4-mysql php4-dev php4-cgi-pgsql php4-cgi-imap php4-pgsql php4-imap php4-cgi-xml php4-cgi-mhash php4-cgi-ldap php4-xml php4-mhash php4-ldap php4-cgi-gd php4-cgi php4-gd php4 Architecture: m68k Version: 4.0.3pl1-0potato4 Distribution: oldstable-security Urgency: high Maintainer: Debian/m68k Build Daemon Description: php4 - A server-side, HTML-embedded scripting language php4-cgi - A server-side, HTML-embedded scripting language php4-cgi-gd - GD module for php4-cgi php4-cgi-imap - IMAP module for php4-cgi php4-cgi-ldap - LDAP module for php4-cgi php4-cgi-mhash - MHASH module for php4-cgi php4-cgi-mysql - MySQL module for php4-cgi php4-cgi-pgsql - PostgreSQL module for php4-cgi php4-cgi-snmp - SNMP module for php4-cgi php4-cgi-xml - XML module for php4-cgi php4-gd - GD module for php4 php4-imap - IMAP module for php4 php4-ldap - LDAP module for php4 php4-mhash - MHASH module for php4 php4-mysql - MySQL module for php4 php4-pgsql - PostgreSQL module for php4 php4-snmp - SNMP module for php4 php4-xml - XML module for php4 Changes: php4 (4.0.3pl1-0potato4) oldstable-security; urgency=high . * Non-maintainer upload by Security Team * Backport security fixes from 4.2.3+ to prevent CR/LF injection - Filter control characters from To and Subject in mail() - Filter control characters from URLs passed to fopen() * Was never vulnerable to safe_mode/extra_cmd problem in mail() because extra_cmd doesn't exist yet in this version Files: 29b1bc7739a65d4ebd95d848bccbaf5c 408462 web optional php4_4.0.3pl1-0potato4_m68k.deb fbbc3e0c9f02ef64445c23ca89f623de 22660 web optional php4-gd_4.0.3pl1-0potato4_m68k.deb b2e701b0f96b215755279b3c80002576 25816 web optional php4-imap_4.0.3pl1-0potato4_m68k.deb d84adef69ba42487d9690d6dd4864165 10950 web optional php4-ldap_4.0.3pl1-0potato4_m68k.deb 2d034b5bf7bff46e0a99e4eb8ed4b2db 4304 web optional php4-mhash_4.0.3pl1-0potato4_m68k.deb da679a98e36d44116bc062fd30d2bb7c 12994 web optional php4-mysql_4.0.3pl1-0potato4_m68k.deb bd62ad9128191034cf34d6c57bc32e22 13438 web optional php4-pgsql_4.0.3pl1-0potato4_m68k.deb b7fe9d4a873c266ec7b101e4de9331ad 6108 web optional php4-snmp_4.0.3pl1-0potato4_m68k.deb fa228feda774b603a2a63f5ec46c396c 11772 web optional php4-xml_4.0.3pl1-0potato4_m68k.deb 2d3fbdc339ba1692d1c7e98fc50b9920 592990 web optional php4-cgi_4.0.3pl1-0potato4_m68k.deb d65d07e9afd0f7610a1765de4eedd684 22664 web optional php4-cgi-gd_4.0.3pl1-0potato4_m68k.deb 80e10f807e76509e046b5355790b166d 25818 web optional php4-cgi-imap_4.0.3pl1-0potato4_m68k.deb fc9fe4f7c101cc9ba64ce69256728de4 10956 web optional php4-cgi-ldap_4.0.3pl1-0potato4_m68k.deb dae4baf2e3fe5d4005e0c8f67ae2facc 4310 web optional php4-cgi-mhash_4.0.3pl1-0potato4_m68k.deb 3039b6e69d60eaadfd79a39e35a9bb48 12996 web optional php4-cgi-mysql_4.0.3pl1-0potato4_m68k.deb 2bf1836d1e0b06ddf57d9a8b96be8b8e 13438 web optional php4-cgi-pgsql_4.0.3pl1-0potato4_m68k.deb 581134f99ecf516b42794ea42fee0f5c 6110 web optional php4-cgi-snmp_4.0.3pl1-0potato4_m68k.deb 188b87c3885aec1d4a16d0cb4bed68c1 11778 web optional php4-cgi-xml_4.0.3pl1-0potato4_m68k.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.7 (GNU/Linux) iD8DBQE9gjmMW5ql+IAeqTIRAq/2AJ9M/Y4RNgF3N9xLwbzj/2VtN6rncwCdGH3X ui2OwfzbMkM7cYD6QEuyw4o= =BuDy -----END PGP SIGNATURE-----