Debians sikkerhedsbulletin

DSA-115-1 php -- ikke-fungerende grænsetjek og mere

Rapporteret den:
2. mar 2002
Berørte pakker:
php3, php4
Sårbar:
Ja
Referencer i sikkerhedsdatabaser:
I Bugtraq-databasen (hos SecurityFocus): BugTraq-id 4183.
I Mitres CVE-ordbog: CVE-2002-0081.
CERTs noter om sårbarheder, bulletiner og hændelser: CA-2002-05, VU#297363.
Yderligere oplysninger:

Stefan Esser, som også er medlem af PHP-teamet, har fundet flere fejl i den måde som PHP håndterer POST-forespørgsler af typen multipart-/form-data (som beskrevet i RFC1867) kendt som POST-filoverførsler. Alle fejlene kunne give en angriber mulighed for at udføre vilkårlig kode på offerets system.

I PHP3 består fejlene af et ikke-fungerende grænsetjek og et tilfældigt stak-overløb. I PHP4 består fejlene af et ikke-fungerende grænsetjek og en fejl hvor stakken er forskudt med én.

I Debians stabile distribution er problemerne rettet i version 3.0.18-0potato1.1 af PHP3 og version 4.0.3pl1-0potato3 af PHP4.

I Debians ustabile og test-distributioner er problemerne rettet i version 3.0.18-22 af PHP3 og version 4.1.2-1 af PHP4.

Der er ingen PHP4 i den stabile og ustabile distribution til arm-arkitekturen på grund af en compiler-fejl.

Vi anbefaler at du omgående opgraderer dine PHP-pakker.

Rettet i:

Debian GNU/Linux 2.2 (potato)

Kildekode:
http://security.debian.org/dists/stable/updates/main/source/php3_3.0.18-0potato1.1.diff.gz
http://security.debian.org/dists/stable/updates/main/source/php3_3.0.18-0potato1.1.dsc
http://security.debian.org/dists/stable/updates/main/source/php3_3.0.18.orig.tar.gz
http://security.debian.org/dists/stable/updates/main/source/php4_4.0.3pl1-0potato3.diff.gz
http://security.debian.org/dists/stable/updates/main/source/php4_4.0.3pl1-0potato3.dsc
http://security.debian.org/dists/stable/updates/main/source/php4_4.0.3pl1.orig.tar.gz
Arkitekturuafhængig komponent:
http://security.debian.org/dists/stable/updates/main/binary-all/php3-doc_3.0.18-0potato1.1_all.deb
http://security.debian.org/dists/stable/updates/main/binary-all/php4-dev_4.0.3pl1-0potato3_all.deb
Alpha:
http://security.debian.org/dists/stable/updates/main/binary-alpha/php3-cgi-gd_3.0.18-0potato1.1_alpha.deb
http://security.debian.org/dists/stable/updates/main/binary-alpha/php3-cgi-imap_3.0.18-0potato1.1_alpha.deb
http://security.debian.org/dists/stable/updates/main/binary-alpha/php3-cgi-ldap_3.0.18-0potato1.1_alpha.deb
http://security.debian.org/dists/stable/updates/main/binary-alpha/php3-cgi-magick_3.0.18-0potato1.1_alpha.deb
http://security.debian.org/dists/stable/updates/main/binary-alpha/php3-cgi-mhash_3.0.18-0potato1.1_alpha.deb
http://security.debian.org/dists/stable/updates/main/binary-alpha/php3-cgi-mysql_3.0.18-0potato1.1_alpha.deb
http://security.debian.org/dists/stable/updates/main/binary-alpha/php3-cgi-pgsql_3.0.18-0potato1.1_alpha.deb
http://security.debian.org/dists/stable/updates/main/binary-alpha/php3-cgi-snmp_3.0.18-0potato1.1_alpha.deb
http://security.debian.org/dists/stable/updates/main/binary-alpha/php3-cgi-xml_3.0.18-0potato1.1_alpha.deb
http://security.debian.org/dists/stable/updates/main/binary-alpha/php3-cgi_3.0.18-0potato1.1_alpha.deb
http://security.debian.org/dists/stable/updates/main/binary-alpha/php3-dev_3.0.18-0potato1.1_alpha.deb
http://security.debian.org/dists/stable/updates/main/binary-alpha/php3-gd_3.0.18-0potato1.1_alpha.deb
http://security.debian.org/dists/stable/updates/main/binary-alpha/php3-imap_3.0.18-0potato1.1_alpha.deb
http://security.debian.org/dists/stable/updates/main/binary-alpha/php3-ldap_3.0.18-0potato1.1_alpha.deb
http://security.debian.org/dists/stable/updates/main/binary-alpha/php3-magick_3.0.18-0potato1.1_alpha.deb
http://security.debian.org/dists/stable/updates/main/binary-alpha/php3-mhash_3.0.18-0potato1.1_alpha.deb
http://security.debian.org/dists/stable/updates/main/binary-alpha/php3-mysql_3.0.18-0potato1.1_alpha.deb
http://security.debian.org/dists/stable/updates/main/binary-alpha/php3-pgsql_3.0.18-0potato1.1_alpha.deb
http://security.debian.org/dists/stable/updates/main/binary-alpha/php3-snmp_3.0.18-0potato1.1_alpha.deb
http://security.debian.org/dists/stable/updates/main/binary-alpha/php3-xml_3.0.18-0potato1.1_alpha.deb
http://security.debian.org/dists/stable/updates/main/binary-alpha/php3_3.0.18-0potato1.1_alpha.deb
http://security.debian.org/dists/stable/updates/main/binary-alpha/php4-cgi-gd_4.0.3pl1-0potato3_alpha.deb
http://security.debian.org/dists/stable/updates/main/binary-alpha/php4_4.0.3pl1-0potato3_alpha.deb
http://security.debian.org/dists/stable/updates/main/binary-alpha/php4-cgi-imap_4.0.3pl1-0potato3_alpha.deb
http://security.debian.org/dists/stable/updates/main/binary-alpha/php4-cgi-ldap_4.0.3pl1-0potato3_alpha.deb
http://security.debian.org/dists/stable/updates/main/binary-alpha/php4-cgi-mhash_4.0.3pl1-0potato3_alpha.deb
http://security.debian.org/dists/stable/updates/main/binary-alpha/php4-cgi-mysql_4.0.3pl1-0potato3_alpha.deb
http://security.debian.org/dists/stable/updates/main/binary-alpha/php4-cgi-pgsql_4.0.3pl1-0potato3_alpha.deb
http://security.debian.org/dists/stable/updates/main/binary-alpha/php4-cgi-snmp_4.0.3pl1-0potato3_alpha.deb
http://security.debian.org/dists/stable/updates/main/binary-alpha/php4-cgi-xml_4.0.3pl1-0potato3_alpha.deb
http://security.debian.org/dists/stable/updates/main/binary-alpha/php4-cgi_4.0.3pl1-0potato3_alpha.deb
http://security.debian.org/dists/stable/updates/main/binary-alpha/php4-gd_4.0.3pl1-0potato3_alpha.deb
http://security.debian.org/dists/stable/updates/main/binary-alpha/php4-imap_4.0.3pl1-0potato3_alpha.deb
http://security.debian.org/dists/stable/updates/main/binary-alpha/php4-ldap_4.0.3pl1-0potato3_alpha.deb
http://security.debian.org/dists/stable/updates/main/binary-alpha/php4-mhash_4.0.3pl1-0potato3_alpha.deb
http://security.debian.org/dists/stable/updates/main/binary-alpha/php4-mysql_4.0.3pl1-0potato3_alpha.deb
http://security.debian.org/dists/stable/updates/main/binary-alpha/php4-pgsql_4.0.3pl1-0potato3_alpha.deb
http://security.debian.org/dists/stable/updates/main/binary-alpha/php4-snmp_4.0.3pl1-0potato3_alpha.deb
http://security.debian.org/dists/stable/updates/main/binary-alpha/php4-xml_4.0.3pl1-0potato3_alpha.deb
ARM:
http://security.debian.org/dists/stable/updates/main/binary-arm/php3-cgi-gd_3.0.18-0potato1.1_arm.deb
http://security.debian.org/dists/stable/updates/main/binary-arm/php3-cgi-imap_3.0.18-0potato1.1_arm.deb
http://security.debian.org/dists/stable/updates/main/binary-arm/php3-cgi-ldap_3.0.18-0potato1.1_arm.deb
http://security.debian.org/dists/stable/updates/main/binary-arm/php3-cgi-magick_3.0.18-0potato1.1_arm.deb
http://security.debian.org/dists/stable/updates/main/binary-arm/php3-cgi-mhash_3.0.18-0potato1.1_arm.deb
http://security.debian.org/dists/stable/updates/main/binary-arm/php3-cgi-mysql_3.0.18-0potato1.1_arm.deb
http://security.debian.org/dists/stable/updates/main/binary-arm/php3-cgi-pgsql_3.0.18-0potato1.1_arm.deb
http://security.debian.org/dists/stable/updates/main/binary-arm/php3-cgi-snmp_3.0.18-0potato1.1_arm.deb
http://security.debian.org/dists/stable/updates/main/binary-arm/php3-cgi-xml_3.0.18-0potato1.1_arm.deb
http://security.debian.org/dists/stable/updates/main/binary-arm/php3-cgi_3.0.18-0potato1.1_arm.deb
http://security.debian.org/dists/stable/updates/main/binary-arm/php3-dev_3.0.18-0potato1.1_arm.deb
http://security.debian.org/dists/stable/updates/main/binary-arm/php3-gd_3.0.18-0potato1.1_arm.deb
http://security.debian.org/dists/stable/updates/main/binary-arm/php3-imap_3.0.18-0potato1.1_arm.deb
http://security.debian.org/dists/stable/updates/main/binary-arm/php3-ldap_3.0.18-0potato1.1_arm.deb
http://security.debian.org/dists/stable/updates/main/binary-arm/php3-magick_3.0.18-0potato1.1_arm.deb
http://security.debian.org/dists/stable/updates/main/binary-arm/php3-mhash_3.0.18-0potato1.1_arm.deb
http://security.debian.org/dists/stable/updates/main/binary-arm/php3-mysql_3.0.18-0potato1.1_arm.deb
http://security.debian.org/dists/stable/updates/main/binary-arm/php3-pgsql_3.0.18-0potato1.1_arm.deb
http://security.debian.org/dists/stable/updates/main/binary-arm/php3-snmp_3.0.18-0potato1.1_arm.deb
http://security.debian.org/dists/stable/updates/main/binary-arm/php3-xml_3.0.18-0potato1.1_arm.deb
http://security.debian.org/dists/stable/updates/main/binary-arm/php3_3.0.18-0potato1.1_arm.deb
Intel ia32:
http://security.debian.org/dists/stable/updates/main/binary-i386/php3-cgi-gd_3.0.18-0potato1.1_i386.deb
http://security.debian.org/dists/stable/updates/main/binary-i386/php3-cgi-imap_3.0.18-0potato1.1_i386.deb
http://security.debian.org/dists/stable/updates/main/binary-i386/php3-cgi-ldap_3.0.18-0potato1.1_i386.deb
http://security.debian.org/dists/stable/updates/main/binary-i386/php3-cgi-magick_3.0.18-0potato1.1_i386.deb
http://security.debian.org/dists/stable/updates/main/binary-i386/php3-cgi-mhash_3.0.18-0potato1.1_i386.deb
http://security.debian.org/dists/stable/updates/main/binary-i386/php3-cgi-mysql_3.0.18-0potato1.1_i386.deb
http://security.debian.org/dists/stable/updates/main/binary-i386/php3-cgi-pgsql_3.0.18-0potato1.1_i386.deb
http://security.debian.org/dists/stable/updates/main/binary-i386/php3-cgi-snmp_3.0.18-0potato1.1_i386.deb
http://security.debian.org/dists/stable/updates/main/binary-i386/php3-cgi-xml_3.0.18-0potato1.1_i386.deb
http://security.debian.org/dists/stable/updates/main/binary-i386/php3-cgi_3.0.18-0potato1.1_i386.deb
http://security.debian.org/dists/stable/updates/main/binary-i386/php3-dev_3.0.18-0potato1.1_i386.deb
http://security.debian.org/dists/stable/updates/main/binary-i386/php3-gd_3.0.18-0potato1.1_i386.deb
http://security.debian.org/dists/stable/updates/main/binary-i386/php3-imap_3.0.18-0potato1.1_i386.deb
http://security.debian.org/dists/stable/updates/main/binary-i386/php3-ldap_3.0.18-0potato1.1_i386.deb
http://security.debian.org/dists/stable/updates/main/binary-i386/php3-magick_3.0.18-0potato1.1_i386.deb
http://security.debian.org/dists/stable/updates/main/binary-i386/php3-mhash_3.0.18-0potato1.1_i386.deb
http://security.debian.org/dists/stable/updates/main/binary-i386/php3-mysql_3.0.18-0potato1.1_i386.deb
http://security.debian.org/dists/stable/updates/main/binary-i386/php3-pgsql_3.0.18-0potato1.1_i386.deb
http://security.debian.org/dists/stable/updates/main/binary-i386/php3-snmp_3.0.18-0potato1.1_i386.deb
http://security.debian.org/dists/stable/updates/main/binary-i386/php3-xml_3.0.18-0potato1.1_i386.deb
http://security.debian.org/dists/stable/updates/main/binary-i386/php3_3.0.18-0potato1.1_i386.deb
http://security.debian.org/dists/stable/updates/main/binary-i386/php4-cgi-gd_4.0.3pl1-0potato3_i386.deb
http://security.debian.org/dists/stable/updates/main/binary-i386/php4-cgi-imap_4.0.3pl1-0potato3_i386.deb
http://security.debian.org/dists/stable/updates/main/binary-i386/php4-cgi-ldap_4.0.3pl1-0potato3_i386.deb
http://security.debian.org/dists/stable/updates/main/binary-i386/php4-cgi-mhash_4.0.3pl1-0potato3_i386.deb
http://security.debian.org/dists/stable/updates/main/binary-i386/php4-cgi-mysql_4.0.3pl1-0potato3_i386.deb
http://security.debian.org/dists/stable/updates/main/binary-i386/php4-cgi-pgsql_4.0.3pl1-0potato3_i386.deb
http://security.debian.org/dists/stable/updates/main/binary-i386/php4-cgi-snmp_4.0.3pl1-0potato3_i386.deb
http://security.debian.org/dists/stable/updates/main/binary-i386/php4-cgi-xml_4.0.3pl1-0potato3_i386.deb
http://security.debian.org/dists/stable/updates/main/binary-i386/php4-cgi_4.0.3pl1-0potato3_i386.deb
http://security.debian.org/dists/stable/updates/main/binary-i386/php4-gd_4.0.3pl1-0potato3_i386.deb
http://security.debian.org/dists/stable/updates/main/binary-i386/php4-imap_4.0.3pl1-0potato3_i386.deb
http://security.debian.org/dists/stable/updates/main/binary-i386/php4-ldap_4.0.3pl1-0potato3_i386.deb
http://security.debian.org/dists/stable/updates/main/binary-i386/php4-mhash_4.0.3pl1-0potato3_i386.deb
http://security.debian.org/dists/stable/updates/main/binary-i386/php4-mysql_4.0.3pl1-0potato3_i386.deb
http://security.debian.org/dists/stable/updates/main/binary-i386/php4-pgsql_4.0.3pl1-0potato3_i386.deb
http://security.debian.org/dists/stable/updates/main/binary-i386/php4-snmp_4.0.3pl1-0potato3_i386.deb
http://security.debian.org/dists/stable/updates/main/binary-i386/php4-xml_4.0.3pl1-0potato3_i386.deb
http://security.debian.org/dists/stable/updates/main/binary-i386/php4_4.0.3pl1-0potato3_i386.deb
Motorola 680x0:
http://security.debian.org/dists/stable/updates/main/binary-m68k/php3-cgi-gd_3.0.18-0potato1.1_m68k.deb
http://security.debian.org/dists/stable/updates/main/binary-m68k/php3-cgi-imap_3.0.18-0potato1.1_m68k.deb
http://security.debian.org/dists/stable/updates/main/binary-m68k/php3-cgi-ldap_3.0.18-0potato1.1_m68k.deb
http://security.debian.org/dists/stable/updates/main/binary-m68k/php3-cgi-magick_3.0.18-0potato1.1_m68k.deb
http://security.debian.org/dists/stable/updates/main/binary-m68k/php3-cgi-mhash_3.0.18-0potato1.1_m68k.deb
http://security.debian.org/dists/stable/updates/main/binary-m68k/php3-cgi-mysql_3.0.18-0potato1.1_m68k.deb
http://security.debian.org/dists/stable/updates/main/binary-m68k/php3-cgi-pgsql_3.0.18-0potato1.1_m68k.deb
http://security.debian.org/dists/stable/updates/main/binary-m68k/php3-cgi-snmp_3.0.18-0potato1.1_m68k.deb
http://security.debian.org/dists/stable/updates/main/binary-m68k/php3-cgi-xml_3.0.18-0potato1.1_m68k.deb
http://security.debian.org/dists/stable/updates/main/binary-m68k/php3-cgi_3.0.18-0potato1.1_m68k.deb
http://security.debian.org/dists/stable/updates/main/binary-m68k/php3-dev_3.0.18-0potato1.1_m68k.deb
http://security.debian.org/dists/stable/updates/main/binary-m68k/php3-gd_3.0.18-0potato1.1_m68k.deb
http://security.debian.org/dists/stable/updates/main/binary-m68k/php3-imap_3.0.18-0potato1.1_m68k.deb
http://security.debian.org/dists/stable/updates/main/binary-m68k/php3-ldap_3.0.18-0potato1.1_m68k.deb
http://security.debian.org/dists/stable/updates/main/binary-m68k/php3-magick_3.0.18-0potato1.1_m68k.deb
http://security.debian.org/dists/stable/updates/main/binary-m68k/php3-mhash_3.0.18-0potato1.1_m68k.deb
http://security.debian.org/dists/stable/updates/main/binary-m68k/php3-mysql_3.0.18-0potato1.1_m68k.deb
http://security.debian.org/dists/stable/updates/main/binary-m68k/php3-pgsql_3.0.18-0potato1.1_m68k.deb
http://security.debian.org/dists/stable/updates/main/binary-m68k/php3-snmp_3.0.18-0potato1.1_m68k.deb
http://security.debian.org/dists/stable/updates/main/binary-m68k/php3-xml_3.0.18-0potato1.1_m68k.deb
http://security.debian.org/dists/stable/updates/main/binary-m68k/php3_3.0.18-0potato1.1_m68k.deb
http://security.debian.org/dists/stable/updates/main/binary-m68k/php4-cgi-gd_4.0.3pl1-0potato3_m68k.deb
http://security.debian.org/dists/stable/updates/main/binary-m68k/php4-cgi-imap_4.0.3pl1-0potato3_m68k.deb
http://security.debian.org/dists/stable/updates/main/binary-m68k/php4-cgi-ldap_4.0.3pl1-0potato3_m68k.deb
http://security.debian.org/dists/stable/updates/main/binary-m68k/php4-cgi-mhash_4.0.3pl1-0potato3_m68k.deb
http://security.debian.org/dists/stable/updates/main/binary-m68k/php4-cgi-mysql_4.0.3pl1-0potato3_m68k.deb
http://security.debian.org/dists/stable/updates/main/binary-m68k/php4-cgi-pgsql_4.0.3pl1-0potato3_m68k.deb
http://security.debian.org/dists/stable/updates/main/binary-m68k/php4-cgi-snmp_4.0.3pl1-0potato3_m68k.deb
http://security.debian.org/dists/stable/updates/main/binary-m68k/php4-cgi-xml_4.0.3pl1-0potato3_m68k.deb
http://security.debian.org/dists/stable/updates/main/binary-m68k/php4-cgi_4.0.3pl1-0potato3_m68k.deb
http://security.debian.org/dists/stable/updates/main/binary-m68k/php4-gd_4.0.3pl1-0potato3_m68k.deb
http://security.debian.org/dists/stable/updates/main/binary-m68k/php4-imap_4.0.3pl1-0potato3_m68k.deb
http://security.debian.org/dists/stable/updates/main/binary-m68k/php4-ldap_4.0.3pl1-0potato3_m68k.deb
http://security.debian.org/dists/stable/updates/main/binary-m68k/php4-mhash_4.0.3pl1-0potato3_m68k.deb
http://security.debian.org/dists/stable/updates/main/binary-m68k/php4-mysql_4.0.3pl1-0potato3_m68k.deb
http://security.debian.org/dists/stable/updates/main/binary-m68k/php4-pgsql_4.0.3pl1-0potato3_m68k.deb
http://security.debian.org/dists/stable/updates/main/binary-m68k/php4-snmp_4.0.3pl1-0potato3_m68k.deb
http://security.debian.org/dists/stable/updates/main/binary-m68k/php4_4.0.3pl1-0potato3_m68k.deb
http://security.debian.org/dists/stable/updates/main/binary-m68k/php4-xml_4.0.3pl1-0potato3_m68k.deb
PowerPC:
http://security.debian.org/dists/stable/updates/main/binary-powerpc/php3-cgi-gd_3.0.18-0potato1.1_powerpc.deb
http://security.debian.org/dists/stable/updates/main/binary-powerpc/php3-cgi-imap_3.0.18-0potato1.1_powerpc.deb
http://security.debian.org/dists/stable/updates/main/binary-powerpc/php3-cgi-ldap_3.0.18-0potato1.1_powerpc.deb
http://security.debian.org/dists/stable/updates/main/binary-powerpc/php3-cgi-magick_3.0.18-0potato1.1_powerpc.deb
http://security.debian.org/dists/stable/updates/main/binary-powerpc/php3-cgi-mhash_3.0.18-0potato1.1_powerpc.deb
http://security.debian.org/dists/stable/updates/main/binary-powerpc/php3-cgi-mysql_3.0.18-0potato1.1_powerpc.deb
http://security.debian.org/dists/stable/updates/main/binary-powerpc/php3-cgi-pgsql_3.0.18-0potato1.1_powerpc.deb
http://security.debian.org/dists/stable/updates/main/binary-powerpc/php3-cgi-snmp_3.0.18-0potato1.1_powerpc.deb
http://security.debian.org/dists/stable/updates/main/binary-powerpc/php3-cgi-xml_3.0.18-0potato1.1_powerpc.deb
http://security.debian.org/dists/stable/updates/main/binary-powerpc/php3-cgi_3.0.18-0potato1.1_powerpc.deb
http://security.debian.org/dists/stable/updates/main/binary-powerpc/php3-dev_3.0.18-0potato1.1_powerpc.deb
http://security.debian.org/dists/stable/updates/main/binary-powerpc/php3-gd_3.0.18-0potato1.1_powerpc.deb
http://security.debian.org/dists/stable/updates/main/binary-powerpc/php3-imap_3.0.18-0potato1.1_powerpc.deb
http://security.debian.org/dists/stable/updates/main/binary-powerpc/php3-ldap_3.0.18-0potato1.1_powerpc.deb
http://security.debian.org/dists/stable/updates/main/binary-powerpc/php3-magick_3.0.18-0potato1.1_powerpc.deb
http://security.debian.org/dists/stable/updates/main/binary-powerpc/php3-mhash_3.0.18-0potato1.1_powerpc.deb
http://security.debian.org/dists/stable/updates/main/binary-powerpc/php3-mysql_3.0.18-0potato1.1_powerpc.deb
http://security.debian.org/dists/stable/updates/main/binary-powerpc/php3-pgsql_3.0.18-0potato1.1_powerpc.deb
http://security.debian.org/dists/stable/updates/main/binary-powerpc/php3-snmp_3.0.18-0potato1.1_powerpc.deb
http://security.debian.org/dists/stable/updates/main/binary-powerpc/php3-xml_3.0.18-0potato1.1_powerpc.deb
http://security.debian.org/dists/stable/updates/main/binary-powerpc/php3_3.0.18-0potato1.1_powerpc.deb
http://security.debian.org/dists/stable/updates/main/binary-powerpc/php4-cgi-gd_4.0.3pl1-0potato3_powerpc.deb
http://security.debian.org/dists/stable/updates/main/binary-powerpc/php4-cgi-imap_4.0.3pl1-0potato3_powerpc.deb
http://security.debian.org/dists/stable/updates/main/binary-powerpc/php4-cgi-ldap_4.0.3pl1-0potato3_powerpc.deb
http://security.debian.org/dists/stable/updates/main/binary-powerpc/php4-cgi-mhash_4.0.3pl1-0potato3_powerpc.deb
http://security.debian.org/dists/stable/updates/main/binary-powerpc/php4-cgi-mysql_4.0.3pl1-0potato3_powerpc.deb
http://security.debian.org/dists/stable/updates/main/binary-powerpc/php4-cgi-pgsql_4.0.3pl1-0potato3_powerpc.deb
http://security.debian.org/dists/stable/updates/main/binary-powerpc/php4-cgi-snmp_4.0.3pl1-0potato3_powerpc.deb
http://security.debian.org/dists/stable/updates/main/binary-powerpc/php4-cgi-xml_4.0.3pl1-0potato3_powerpc.deb
http://security.debian.org/dists/stable/updates/main/binary-powerpc/php4-cgi_4.0.3pl1-0potato3_powerpc.deb
http://security.debian.org/dists/stable/updates/main/binary-powerpc/php4-gd_4.0.3pl1-0potato3_powerpc.deb
http://security.debian.org/dists/stable/updates/main/binary-powerpc/php4-imap_4.0.3pl1-0potato3_powerpc.deb
http://security.debian.org/dists/stable/updates/main/binary-powerpc/php4-ldap_4.0.3pl1-0potato3_powerpc.deb
http://security.debian.org/dists/stable/updates/main/binary-powerpc/php4-mhash_4.0.3pl1-0potato3_powerpc.deb
http://security.debian.org/dists/stable/updates/main/binary-powerpc/php4-mysql_4.0.3pl1-0potato3_powerpc.deb
http://security.debian.org/dists/stable/updates/main/binary-powerpc/php4-pgsql_4.0.3pl1-0potato3_powerpc.deb
http://security.debian.org/dists/stable/updates/main/binary-powerpc/php4-snmp_4.0.3pl1-0potato3_powerpc.deb
http://security.debian.org/dists/stable/updates/main/binary-powerpc/php4-xml_4.0.3pl1-0potato3_powerpc.deb
http://security.debian.org/dists/stable/updates/main/binary-powerpc/php4_4.0.3pl1-0potato3_powerpc.deb
Sun Sparc:
http://security.debian.org/dists/stable/updates/main/binary-sparc/php3-cgi-gd_3.0.18-0potato1.1_sparc.deb
http://security.debian.org/dists/stable/updates/main/binary-sparc/php3-cgi-imap_3.0.18-0potato1.1_sparc.deb
http://security.debian.org/dists/stable/updates/main/binary-sparc/php3-cgi-ldap_3.0.18-0potato1.1_sparc.deb
http://security.debian.org/dists/stable/updates/main/binary-sparc/php3-cgi-magick_3.0.18-0potato1.1_sparc.deb
http://security.debian.org/dists/stable/updates/main/binary-sparc/php3-cgi-mhash_3.0.18-0potato1.1_sparc.deb
http://security.debian.org/dists/stable/updates/main/binary-sparc/php3-cgi-mysql_3.0.18-0potato1.1_sparc.deb
http://security.debian.org/dists/stable/updates/main/binary-sparc/php3-cgi-pgsql_3.0.18-0potato1.1_sparc.deb
http://security.debian.org/dists/stable/updates/main/binary-sparc/php3-cgi-snmp_3.0.18-0potato1.1_sparc.deb
http://security.debian.org/dists/stable/updates/main/binary-sparc/php3-cgi-xml_3.0.18-0potato1.1_sparc.deb
http://security.debian.org/dists/stable/updates/main/binary-sparc/php3-cgi_3.0.18-0potato1.1_sparc.deb
http://security.debian.org/dists/stable/updates/main/binary-sparc/php3-dev_3.0.18-0potato1.1_sparc.deb
http://security.debian.org/dists/stable/updates/main/binary-sparc/php3-gd_3.0.18-0potato1.1_sparc.deb
http://security.debian.org/dists/stable/updates/main/binary-sparc/php3-imap_3.0.18-0potato1.1_sparc.deb
http://security.debian.org/dists/stable/updates/main/binary-sparc/php3-ldap_3.0.18-0potato1.1_sparc.deb
http://security.debian.org/dists/stable/updates/main/binary-sparc/php3-magick_3.0.18-0potato1.1_sparc.deb
http://security.debian.org/dists/stable/updates/main/binary-sparc/php3-mhash_3.0.18-0potato1.1_sparc.deb
http://security.debian.org/dists/stable/updates/main/binary-sparc/php3-mysql_3.0.18-0potato1.1_sparc.deb
http://security.debian.org/dists/stable/updates/main/binary-sparc/php3-pgsql_3.0.18-0potato1.1_sparc.deb
http://security.debian.org/dists/stable/updates/main/binary-sparc/php3-snmp_3.0.18-0potato1.1_sparc.deb
http://security.debian.org/dists/stable/updates/main/binary-sparc/php3-xml_3.0.18-0potato1.1_sparc.deb
http://security.debian.org/dists/stable/updates/main/binary-sparc/php3_3.0.18-0potato1.1_sparc.deb
http://security.debian.org/dists/stable/updates/main/binary-sparc/php4-cgi-gd_4.0.3pl1-0potato3_sparc.deb
http://security.debian.org/dists/stable/updates/main/binary-sparc/php4_4.0.3pl1-0potato3_sparc.deb
http://security.debian.org/dists/stable/updates/main/binary-sparc/php4-cgi-imap_4.0.3pl1-0potato3_sparc.deb
http://security.debian.org/dists/stable/updates/main/binary-sparc/php4-cgi-ldap_4.0.3pl1-0potato3_sparc.deb
http://security.debian.org/dists/stable/updates/main/binary-sparc/php4-cgi-mhash_4.0.3pl1-0potato3_sparc.deb
http://security.debian.org/dists/stable/updates/main/binary-sparc/php4-cgi-mysql_4.0.3pl1-0potato3_sparc.deb
http://security.debian.org/dists/stable/updates/main/binary-sparc/php4-cgi-pgsql_4.0.3pl1-0potato3_sparc.deb
http://security.debian.org/dists/stable/updates/main/binary-sparc/php4-cgi-snmp_4.0.3pl1-0potato3_sparc.deb
http://security.debian.org/dists/stable/updates/main/binary-sparc/php4-cgi-xml_4.0.3pl1-0potato3_sparc.deb
http://security.debian.org/dists/stable/updates/main/binary-sparc/php4-cgi_4.0.3pl1-0potato3_sparc.deb
http://security.debian.org/dists/stable/updates/main/binary-sparc/php4-gd_4.0.3pl1-0potato3_sparc.deb
http://security.debian.org/dists/stable/updates/main/binary-sparc/php4-imap_4.0.3pl1-0potato3_sparc.deb
http://security.debian.org/dists/stable/updates/main/binary-sparc/php4-ldap_4.0.3pl1-0potato3_sparc.deb
http://security.debian.org/dists/stable/updates/main/binary-sparc/php4-mhash_4.0.3pl1-0potato3_sparc.deb
http://security.debian.org/dists/stable/updates/main/binary-sparc/php4-mysql_4.0.3pl1-0potato3_sparc.deb
http://security.debian.org/dists/stable/updates/main/binary-sparc/php4-pgsql_4.0.3pl1-0potato3_sparc.deb
http://security.debian.org/dists/stable/updates/main/binary-sparc/php4-snmp_4.0.3pl1-0potato3_sparc.deb
http://security.debian.org/dists/stable/updates/main/binary-sparc/php4-xml_4.0.3pl1-0potato3_sparc.deb

MD5-kontrolsummer for de listede filer findes i den originale sikkerhedsbulletin.