Debian セキュリティ勧告

DSA-115-1 php -- 境界チェックのバグ、そのほか

報告日時:
2002-03-02
影響を受けるパッケージ:
php3, php4
危険性:
あり
参考セキュリティデータベース:
(SecurityFocus の) Bugtraq データベース: BugTraq ID 4183.
Mitre の CVE 辞書: CVE-2002-0081.
CERT の脆弱性リスト、勧告および付加情報: CA-2002-05, VU#297363.
詳細:

PHP チームのメンバの Stefan Esser さんが PHP の multipart/form-data の POST リクエスト (RFC1867 記載の POST アップロードとして知られるリクエスト) を処理する際にいくつかの弱点があることを見つけました。詳細は 脆弱性の詳細 に記載があります。 そのどの弱点によっても、攻撃者が攻撃対象のシステムで任意のコードを実行することが可能です。

PHP3 の問題点は境界チェックのバグと、ヒープオーバフローを任意に起こせるというバグなどです。 また PHP4 では、境界チェックのバグと、ヒープ外に一バイト踏み出してしまうバグなどです。

Debian 安定版 (potato) では、これらの問題は PHP3 のバージョン 3.0.18-0potato1.1 および、PHP4 ではバージョン 4.0.3pl1-0potato3 で修正されています。

Debian テスト版 (testing) および不安定版 (unstable) では、これらの問題は各々 PHP3 のバージョン 3.0.18-22 と、PHP4 のバージョン 4.1.2-1 で修正されています。

arm アーキテクチャ向けには、コンパイルエラーになる関係で PHP4 は安定版 (stable)、 不安定版 (unstable) のどちらでも提供されていません。

PHP パッケージを直ぐにアップグレードすることを勧めます。

修正:

Debian GNU/Linux 2.2 (potato)

ソース:
http://security.debian.org/dists/stable/updates/main/source/php3_3.0.18-0potato1.1.diff.gz
http://security.debian.org/dists/stable/updates/main/source/php3_3.0.18-0potato1.1.dsc
http://security.debian.org/dists/stable/updates/main/source/php3_3.0.18.orig.tar.gz
http://security.debian.org/dists/stable/updates/main/source/php4_4.0.3pl1-0potato3.diff.gz
http://security.debian.org/dists/stable/updates/main/source/php4_4.0.3pl1-0potato3.dsc
http://security.debian.org/dists/stable/updates/main/source/php4_4.0.3pl1.orig.tar.gz
アーキテクチャ非依存コンポーネント:
http://security.debian.org/dists/stable/updates/main/binary-all/php3-doc_3.0.18-0potato1.1_all.deb
http://security.debian.org/dists/stable/updates/main/binary-all/php4-dev_4.0.3pl1-0potato3_all.deb
Alpha:
http://security.debian.org/dists/stable/updates/main/binary-alpha/php3-cgi-gd_3.0.18-0potato1.1_alpha.deb
http://security.debian.org/dists/stable/updates/main/binary-alpha/php3-cgi-imap_3.0.18-0potato1.1_alpha.deb
http://security.debian.org/dists/stable/updates/main/binary-alpha/php3-cgi-ldap_3.0.18-0potato1.1_alpha.deb
http://security.debian.org/dists/stable/updates/main/binary-alpha/php3-cgi-magick_3.0.18-0potato1.1_alpha.deb
http://security.debian.org/dists/stable/updates/main/binary-alpha/php3-cgi-mhash_3.0.18-0potato1.1_alpha.deb
http://security.debian.org/dists/stable/updates/main/binary-alpha/php3-cgi-mysql_3.0.18-0potato1.1_alpha.deb
http://security.debian.org/dists/stable/updates/main/binary-alpha/php3-cgi-pgsql_3.0.18-0potato1.1_alpha.deb
http://security.debian.org/dists/stable/updates/main/binary-alpha/php3-cgi-snmp_3.0.18-0potato1.1_alpha.deb
http://security.debian.org/dists/stable/updates/main/binary-alpha/php3-cgi-xml_3.0.18-0potato1.1_alpha.deb
http://security.debian.org/dists/stable/updates/main/binary-alpha/php3-cgi_3.0.18-0potato1.1_alpha.deb
http://security.debian.org/dists/stable/updates/main/binary-alpha/php3-dev_3.0.18-0potato1.1_alpha.deb
http://security.debian.org/dists/stable/updates/main/binary-alpha/php3-gd_3.0.18-0potato1.1_alpha.deb
http://security.debian.org/dists/stable/updates/main/binary-alpha/php3-imap_3.0.18-0potato1.1_alpha.deb
http://security.debian.org/dists/stable/updates/main/binary-alpha/php3-ldap_3.0.18-0potato1.1_alpha.deb
http://security.debian.org/dists/stable/updates/main/binary-alpha/php3-magick_3.0.18-0potato1.1_alpha.deb
http://security.debian.org/dists/stable/updates/main/binary-alpha/php3-mhash_3.0.18-0potato1.1_alpha.deb
http://security.debian.org/dists/stable/updates/main/binary-alpha/php3-mysql_3.0.18-0potato1.1_alpha.deb
http://security.debian.org/dists/stable/updates/main/binary-alpha/php3-pgsql_3.0.18-0potato1.1_alpha.deb
http://security.debian.org/dists/stable/updates/main/binary-alpha/php3-snmp_3.0.18-0potato1.1_alpha.deb
http://security.debian.org/dists/stable/updates/main/binary-alpha/php3-xml_3.0.18-0potato1.1_alpha.deb
http://security.debian.org/dists/stable/updates/main/binary-alpha/php3_3.0.18-0potato1.1_alpha.deb
http://security.debian.org/dists/stable/updates/main/binary-alpha/php4-cgi-gd_4.0.3pl1-0potato3_alpha.deb
http://security.debian.org/dists/stable/updates/main/binary-alpha/php4_4.0.3pl1-0potato3_alpha.deb
http://security.debian.org/dists/stable/updates/main/binary-alpha/php4-cgi-imap_4.0.3pl1-0potato3_alpha.deb
http://security.debian.org/dists/stable/updates/main/binary-alpha/php4-cgi-ldap_4.0.3pl1-0potato3_alpha.deb
http://security.debian.org/dists/stable/updates/main/binary-alpha/php4-cgi-mhash_4.0.3pl1-0potato3_alpha.deb
http://security.debian.org/dists/stable/updates/main/binary-alpha/php4-cgi-mysql_4.0.3pl1-0potato3_alpha.deb
http://security.debian.org/dists/stable/updates/main/binary-alpha/php4-cgi-pgsql_4.0.3pl1-0potato3_alpha.deb
http://security.debian.org/dists/stable/updates/main/binary-alpha/php4-cgi-snmp_4.0.3pl1-0potato3_alpha.deb
http://security.debian.org/dists/stable/updates/main/binary-alpha/php4-cgi-xml_4.0.3pl1-0potato3_alpha.deb
http://security.debian.org/dists/stable/updates/main/binary-alpha/php4-cgi_4.0.3pl1-0potato3_alpha.deb
http://security.debian.org/dists/stable/updates/main/binary-alpha/php4-gd_4.0.3pl1-0potato3_alpha.deb
http://security.debian.org/dists/stable/updates/main/binary-alpha/php4-imap_4.0.3pl1-0potato3_alpha.deb
http://security.debian.org/dists/stable/updates/main/binary-alpha/php4-ldap_4.0.3pl1-0potato3_alpha.deb
http://security.debian.org/dists/stable/updates/main/binary-alpha/php4-mhash_4.0.3pl1-0potato3_alpha.deb
http://security.debian.org/dists/stable/updates/main/binary-alpha/php4-mysql_4.0.3pl1-0potato3_alpha.deb
http://security.debian.org/dists/stable/updates/main/binary-alpha/php4-pgsql_4.0.3pl1-0potato3_alpha.deb
http://security.debian.org/dists/stable/updates/main/binary-alpha/php4-snmp_4.0.3pl1-0potato3_alpha.deb
http://security.debian.org/dists/stable/updates/main/binary-alpha/php4-xml_4.0.3pl1-0potato3_alpha.deb
ARM:
http://security.debian.org/dists/stable/updates/main/binary-arm/php3-cgi-gd_3.0.18-0potato1.1_arm.deb
http://security.debian.org/dists/stable/updates/main/binary-arm/php3-cgi-imap_3.0.18-0potato1.1_arm.deb
http://security.debian.org/dists/stable/updates/main/binary-arm/php3-cgi-ldap_3.0.18-0potato1.1_arm.deb
http://security.debian.org/dists/stable/updates/main/binary-arm/php3-cgi-magick_3.0.18-0potato1.1_arm.deb
http://security.debian.org/dists/stable/updates/main/binary-arm/php3-cgi-mhash_3.0.18-0potato1.1_arm.deb
http://security.debian.org/dists/stable/updates/main/binary-arm/php3-cgi-mysql_3.0.18-0potato1.1_arm.deb
http://security.debian.org/dists/stable/updates/main/binary-arm/php3-cgi-pgsql_3.0.18-0potato1.1_arm.deb
http://security.debian.org/dists/stable/updates/main/binary-arm/php3-cgi-snmp_3.0.18-0potato1.1_arm.deb
http://security.debian.org/dists/stable/updates/main/binary-arm/php3-cgi-xml_3.0.18-0potato1.1_arm.deb
http://security.debian.org/dists/stable/updates/main/binary-arm/php3-cgi_3.0.18-0potato1.1_arm.deb
http://security.debian.org/dists/stable/updates/main/binary-arm/php3-dev_3.0.18-0potato1.1_arm.deb
http://security.debian.org/dists/stable/updates/main/binary-arm/php3-gd_3.0.18-0potato1.1_arm.deb
http://security.debian.org/dists/stable/updates/main/binary-arm/php3-imap_3.0.18-0potato1.1_arm.deb
http://security.debian.org/dists/stable/updates/main/binary-arm/php3-ldap_3.0.18-0potato1.1_arm.deb
http://security.debian.org/dists/stable/updates/main/binary-arm/php3-magick_3.0.18-0potato1.1_arm.deb
http://security.debian.org/dists/stable/updates/main/binary-arm/php3-mhash_3.0.18-0potato1.1_arm.deb
http://security.debian.org/dists/stable/updates/main/binary-arm/php3-mysql_3.0.18-0potato1.1_arm.deb
http://security.debian.org/dists/stable/updates/main/binary-arm/php3-pgsql_3.0.18-0potato1.1_arm.deb
http://security.debian.org/dists/stable/updates/main/binary-arm/php3-snmp_3.0.18-0potato1.1_arm.deb
http://security.debian.org/dists/stable/updates/main/binary-arm/php3-xml_3.0.18-0potato1.1_arm.deb
http://security.debian.org/dists/stable/updates/main/binary-arm/php3_3.0.18-0potato1.1_arm.deb
Intel ia32:
http://security.debian.org/dists/stable/updates/main/binary-i386/php3-cgi-gd_3.0.18-0potato1.1_i386.deb
http://security.debian.org/dists/stable/updates/main/binary-i386/php3-cgi-imap_3.0.18-0potato1.1_i386.deb
http://security.debian.org/dists/stable/updates/main/binary-i386/php3-cgi-ldap_3.0.18-0potato1.1_i386.deb
http://security.debian.org/dists/stable/updates/main/binary-i386/php3-cgi-magick_3.0.18-0potato1.1_i386.deb
http://security.debian.org/dists/stable/updates/main/binary-i386/php3-cgi-mhash_3.0.18-0potato1.1_i386.deb
http://security.debian.org/dists/stable/updates/main/binary-i386/php3-cgi-mysql_3.0.18-0potato1.1_i386.deb
http://security.debian.org/dists/stable/updates/main/binary-i386/php3-cgi-pgsql_3.0.18-0potato1.1_i386.deb
http://security.debian.org/dists/stable/updates/main/binary-i386/php3-cgi-snmp_3.0.18-0potato1.1_i386.deb
http://security.debian.org/dists/stable/updates/main/binary-i386/php3-cgi-xml_3.0.18-0potato1.1_i386.deb
http://security.debian.org/dists/stable/updates/main/binary-i386/php3-cgi_3.0.18-0potato1.1_i386.deb
http://security.debian.org/dists/stable/updates/main/binary-i386/php3-dev_3.0.18-0potato1.1_i386.deb
http://security.debian.org/dists/stable/updates/main/binary-i386/php3-gd_3.0.18-0potato1.1_i386.deb
http://security.debian.org/dists/stable/updates/main/binary-i386/php3-imap_3.0.18-0potato1.1_i386.deb
http://security.debian.org/dists/stable/updates/main/binary-i386/php3-ldap_3.0.18-0potato1.1_i386.deb
http://security.debian.org/dists/stable/updates/main/binary-i386/php3-magick_3.0.18-0potato1.1_i386.deb
http://security.debian.org/dists/stable/updates/main/binary-i386/php3-mhash_3.0.18-0potato1.1_i386.deb
http://security.debian.org/dists/stable/updates/main/binary-i386/php3-mysql_3.0.18-0potato1.1_i386.deb
http://security.debian.org/dists/stable/updates/main/binary-i386/php3-pgsql_3.0.18-0potato1.1_i386.deb
http://security.debian.org/dists/stable/updates/main/binary-i386/php3-snmp_3.0.18-0potato1.1_i386.deb
http://security.debian.org/dists/stable/updates/main/binary-i386/php3-xml_3.0.18-0potato1.1_i386.deb
http://security.debian.org/dists/stable/updates/main/binary-i386/php3_3.0.18-0potato1.1_i386.deb
http://security.debian.org/dists/stable/updates/main/binary-i386/php4-cgi-gd_4.0.3pl1-0potato3_i386.deb
http://security.debian.org/dists/stable/updates/main/binary-i386/php4-cgi-imap_4.0.3pl1-0potato3_i386.deb
http://security.debian.org/dists/stable/updates/main/binary-i386/php4-cgi-ldap_4.0.3pl1-0potato3_i386.deb
http://security.debian.org/dists/stable/updates/main/binary-i386/php4-cgi-mhash_4.0.3pl1-0potato3_i386.deb
http://security.debian.org/dists/stable/updates/main/binary-i386/php4-cgi-mysql_4.0.3pl1-0potato3_i386.deb
http://security.debian.org/dists/stable/updates/main/binary-i386/php4-cgi-pgsql_4.0.3pl1-0potato3_i386.deb
http://security.debian.org/dists/stable/updates/main/binary-i386/php4-cgi-snmp_4.0.3pl1-0potato3_i386.deb
http://security.debian.org/dists/stable/updates/main/binary-i386/php4-cgi-xml_4.0.3pl1-0potato3_i386.deb
http://security.debian.org/dists/stable/updates/main/binary-i386/php4-cgi_4.0.3pl1-0potato3_i386.deb
http://security.debian.org/dists/stable/updates/main/binary-i386/php4-gd_4.0.3pl1-0potato3_i386.deb
http://security.debian.org/dists/stable/updates/main/binary-i386/php4-imap_4.0.3pl1-0potato3_i386.deb
http://security.debian.org/dists/stable/updates/main/binary-i386/php4-ldap_4.0.3pl1-0potato3_i386.deb
http://security.debian.org/dists/stable/updates/main/binary-i386/php4-mhash_4.0.3pl1-0potato3_i386.deb
http://security.debian.org/dists/stable/updates/main/binary-i386/php4-mysql_4.0.3pl1-0potato3_i386.deb
http://security.debian.org/dists/stable/updates/main/binary-i386/php4-pgsql_4.0.3pl1-0potato3_i386.deb
http://security.debian.org/dists/stable/updates/main/binary-i386/php4-snmp_4.0.3pl1-0potato3_i386.deb
http://security.debian.org/dists/stable/updates/main/binary-i386/php4-xml_4.0.3pl1-0potato3_i386.deb
http://security.debian.org/dists/stable/updates/main/binary-i386/php4_4.0.3pl1-0potato3_i386.deb
Motorola 680x0:
http://security.debian.org/dists/stable/updates/main/binary-m68k/php3-cgi-gd_3.0.18-0potato1.1_m68k.deb
http://security.debian.org/dists/stable/updates/main/binary-m68k/php3-cgi-imap_3.0.18-0potato1.1_m68k.deb
http://security.debian.org/dists/stable/updates/main/binary-m68k/php3-cgi-ldap_3.0.18-0potato1.1_m68k.deb
http://security.debian.org/dists/stable/updates/main/binary-m68k/php3-cgi-magick_3.0.18-0potato1.1_m68k.deb
http://security.debian.org/dists/stable/updates/main/binary-m68k/php3-cgi-mhash_3.0.18-0potato1.1_m68k.deb
http://security.debian.org/dists/stable/updates/main/binary-m68k/php3-cgi-mysql_3.0.18-0potato1.1_m68k.deb
http://security.debian.org/dists/stable/updates/main/binary-m68k/php3-cgi-pgsql_3.0.18-0potato1.1_m68k.deb
http://security.debian.org/dists/stable/updates/main/binary-m68k/php3-cgi-snmp_3.0.18-0potato1.1_m68k.deb
http://security.debian.org/dists/stable/updates/main/binary-m68k/php3-cgi-xml_3.0.18-0potato1.1_m68k.deb
http://security.debian.org/dists/stable/updates/main/binary-m68k/php3-cgi_3.0.18-0potato1.1_m68k.deb
http://security.debian.org/dists/stable/updates/main/binary-m68k/php3-dev_3.0.18-0potato1.1_m68k.deb
http://security.debian.org/dists/stable/updates/main/binary-m68k/php3-gd_3.0.18-0potato1.1_m68k.deb
http://security.debian.org/dists/stable/updates/main/binary-m68k/php3-imap_3.0.18-0potato1.1_m68k.deb
http://security.debian.org/dists/stable/updates/main/binary-m68k/php3-ldap_3.0.18-0potato1.1_m68k.deb
http://security.debian.org/dists/stable/updates/main/binary-m68k/php3-magick_3.0.18-0potato1.1_m68k.deb
http://security.debian.org/dists/stable/updates/main/binary-m68k/php3-mhash_3.0.18-0potato1.1_m68k.deb
http://security.debian.org/dists/stable/updates/main/binary-m68k/php3-mysql_3.0.18-0potato1.1_m68k.deb
http://security.debian.org/dists/stable/updates/main/binary-m68k/php3-pgsql_3.0.18-0potato1.1_m68k.deb
http://security.debian.org/dists/stable/updates/main/binary-m68k/php3-snmp_3.0.18-0potato1.1_m68k.deb
http://security.debian.org/dists/stable/updates/main/binary-m68k/php3-xml_3.0.18-0potato1.1_m68k.deb
http://security.debian.org/dists/stable/updates/main/binary-m68k/php3_3.0.18-0potato1.1_m68k.deb
http://security.debian.org/dists/stable/updates/main/binary-m68k/php4-cgi-gd_4.0.3pl1-0potato3_m68k.deb
http://security.debian.org/dists/stable/updates/main/binary-m68k/php4-cgi-imap_4.0.3pl1-0potato3_m68k.deb
http://security.debian.org/dists/stable/updates/main/binary-m68k/php4-cgi-ldap_4.0.3pl1-0potato3_m68k.deb
http://security.debian.org/dists/stable/updates/main/binary-m68k/php4-cgi-mhash_4.0.3pl1-0potato3_m68k.deb
http://security.debian.org/dists/stable/updates/main/binary-m68k/php4-cgi-mysql_4.0.3pl1-0potato3_m68k.deb
http://security.debian.org/dists/stable/updates/main/binary-m68k/php4-cgi-pgsql_4.0.3pl1-0potato3_m68k.deb
http://security.debian.org/dists/stable/updates/main/binary-m68k/php4-cgi-snmp_4.0.3pl1-0potato3_m68k.deb
http://security.debian.org/dists/stable/updates/main/binary-m68k/php4-cgi-xml_4.0.3pl1-0potato3_m68k.deb
http://security.debian.org/dists/stable/updates/main/binary-m68k/php4-cgi_4.0.3pl1-0potato3_m68k.deb
http://security.debian.org/dists/stable/updates/main/binary-m68k/php4-gd_4.0.3pl1-0potato3_m68k.deb
http://security.debian.org/dists/stable/updates/main/binary-m68k/php4-imap_4.0.3pl1-0potato3_m68k.deb
http://security.debian.org/dists/stable/updates/main/binary-m68k/php4-ldap_4.0.3pl1-0potato3_m68k.deb
http://security.debian.org/dists/stable/updates/main/binary-m68k/php4-mhash_4.0.3pl1-0potato3_m68k.deb
http://security.debian.org/dists/stable/updates/main/binary-m68k/php4-mysql_4.0.3pl1-0potato3_m68k.deb
http://security.debian.org/dists/stable/updates/main/binary-m68k/php4-pgsql_4.0.3pl1-0potato3_m68k.deb
http://security.debian.org/dists/stable/updates/main/binary-m68k/php4-snmp_4.0.3pl1-0potato3_m68k.deb
http://security.debian.org/dists/stable/updates/main/binary-m68k/php4_4.0.3pl1-0potato3_m68k.deb
http://security.debian.org/dists/stable/updates/main/binary-m68k/php4-xml_4.0.3pl1-0potato3_m68k.deb
PowerPC:
http://security.debian.org/dists/stable/updates/main/binary-powerpc/php3-cgi-gd_3.0.18-0potato1.1_powerpc.deb
http://security.debian.org/dists/stable/updates/main/binary-powerpc/php3-cgi-imap_3.0.18-0potato1.1_powerpc.deb
http://security.debian.org/dists/stable/updates/main/binary-powerpc/php3-cgi-ldap_3.0.18-0potato1.1_powerpc.deb
http://security.debian.org/dists/stable/updates/main/binary-powerpc/php3-cgi-magick_3.0.18-0potato1.1_powerpc.deb
http://security.debian.org/dists/stable/updates/main/binary-powerpc/php3-cgi-mhash_3.0.18-0potato1.1_powerpc.deb
http://security.debian.org/dists/stable/updates/main/binary-powerpc/php3-cgi-mysql_3.0.18-0potato1.1_powerpc.deb
http://security.debian.org/dists/stable/updates/main/binary-powerpc/php3-cgi-pgsql_3.0.18-0potato1.1_powerpc.deb
http://security.debian.org/dists/stable/updates/main/binary-powerpc/php3-cgi-snmp_3.0.18-0potato1.1_powerpc.deb
http://security.debian.org/dists/stable/updates/main/binary-powerpc/php3-cgi-xml_3.0.18-0potato1.1_powerpc.deb
http://security.debian.org/dists/stable/updates/main/binary-powerpc/php3-cgi_3.0.18-0potato1.1_powerpc.deb
http://security.debian.org/dists/stable/updates/main/binary-powerpc/php3-dev_3.0.18-0potato1.1_powerpc.deb
http://security.debian.org/dists/stable/updates/main/binary-powerpc/php3-gd_3.0.18-0potato1.1_powerpc.deb
http://security.debian.org/dists/stable/updates/main/binary-powerpc/php3-imap_3.0.18-0potato1.1_powerpc.deb
http://security.debian.org/dists/stable/updates/main/binary-powerpc/php3-ldap_3.0.18-0potato1.1_powerpc.deb
http://security.debian.org/dists/stable/updates/main/binary-powerpc/php3-magick_3.0.18-0potato1.1_powerpc.deb
http://security.debian.org/dists/stable/updates/main/binary-powerpc/php3-mhash_3.0.18-0potato1.1_powerpc.deb
http://security.debian.org/dists/stable/updates/main/binary-powerpc/php3-mysql_3.0.18-0potato1.1_powerpc.deb
http://security.debian.org/dists/stable/updates/main/binary-powerpc/php3-pgsql_3.0.18-0potato1.1_powerpc.deb
http://security.debian.org/dists/stable/updates/main/binary-powerpc/php3-snmp_3.0.18-0potato1.1_powerpc.deb
http://security.debian.org/dists/stable/updates/main/binary-powerpc/php3-xml_3.0.18-0potato1.1_powerpc.deb
http://security.debian.org/dists/stable/updates/main/binary-powerpc/php3_3.0.18-0potato1.1_powerpc.deb
http://security.debian.org/dists/stable/updates/main/binary-powerpc/php4-cgi-gd_4.0.3pl1-0potato3_powerpc.deb
http://security.debian.org/dists/stable/updates/main/binary-powerpc/php4-cgi-imap_4.0.3pl1-0potato3_powerpc.deb
http://security.debian.org/dists/stable/updates/main/binary-powerpc/php4-cgi-ldap_4.0.3pl1-0potato3_powerpc.deb
http://security.debian.org/dists/stable/updates/main/binary-powerpc/php4-cgi-mhash_4.0.3pl1-0potato3_powerpc.deb
http://security.debian.org/dists/stable/updates/main/binary-powerpc/php4-cgi-mysql_4.0.3pl1-0potato3_powerpc.deb
http://security.debian.org/dists/stable/updates/main/binary-powerpc/php4-cgi-pgsql_4.0.3pl1-0potato3_powerpc.deb
http://security.debian.org/dists/stable/updates/main/binary-powerpc/php4-cgi-snmp_4.0.3pl1-0potato3_powerpc.deb
http://security.debian.org/dists/stable/updates/main/binary-powerpc/php4-cgi-xml_4.0.3pl1-0potato3_powerpc.deb
http://security.debian.org/dists/stable/updates/main/binary-powerpc/php4-cgi_4.0.3pl1-0potato3_powerpc.deb
http://security.debian.org/dists/stable/updates/main/binary-powerpc/php4-gd_4.0.3pl1-0potato3_powerpc.deb
http://security.debian.org/dists/stable/updates/main/binary-powerpc/php4-imap_4.0.3pl1-0potato3_powerpc.deb
http://security.debian.org/dists/stable/updates/main/binary-powerpc/php4-ldap_4.0.3pl1-0potato3_powerpc.deb
http://security.debian.org/dists/stable/updates/main/binary-powerpc/php4-mhash_4.0.3pl1-0potato3_powerpc.deb
http://security.debian.org/dists/stable/updates/main/binary-powerpc/php4-mysql_4.0.3pl1-0potato3_powerpc.deb
http://security.debian.org/dists/stable/updates/main/binary-powerpc/php4-pgsql_4.0.3pl1-0potato3_powerpc.deb
http://security.debian.org/dists/stable/updates/main/binary-powerpc/php4-snmp_4.0.3pl1-0potato3_powerpc.deb
http://security.debian.org/dists/stable/updates/main/binary-powerpc/php4-xml_4.0.3pl1-0potato3_powerpc.deb
http://security.debian.org/dists/stable/updates/main/binary-powerpc/php4_4.0.3pl1-0potato3_powerpc.deb
Sun Sparc:
http://security.debian.org/dists/stable/updates/main/binary-sparc/php3-cgi-gd_3.0.18-0potato1.1_sparc.deb
http://security.debian.org/dists/stable/updates/main/binary-sparc/php3-cgi-imap_3.0.18-0potato1.1_sparc.deb
http://security.debian.org/dists/stable/updates/main/binary-sparc/php3-cgi-ldap_3.0.18-0potato1.1_sparc.deb
http://security.debian.org/dists/stable/updates/main/binary-sparc/php3-cgi-magick_3.0.18-0potato1.1_sparc.deb
http://security.debian.org/dists/stable/updates/main/binary-sparc/php3-cgi-mhash_3.0.18-0potato1.1_sparc.deb
http://security.debian.org/dists/stable/updates/main/binary-sparc/php3-cgi-mysql_3.0.18-0potato1.1_sparc.deb
http://security.debian.org/dists/stable/updates/main/binary-sparc/php3-cgi-pgsql_3.0.18-0potato1.1_sparc.deb
http://security.debian.org/dists/stable/updates/main/binary-sparc/php3-cgi-snmp_3.0.18-0potato1.1_sparc.deb
http://security.debian.org/dists/stable/updates/main/binary-sparc/php3-cgi-xml_3.0.18-0potato1.1_sparc.deb
http://security.debian.org/dists/stable/updates/main/binary-sparc/php3-cgi_3.0.18-0potato1.1_sparc.deb
http://security.debian.org/dists/stable/updates/main/binary-sparc/php3-dev_3.0.18-0potato1.1_sparc.deb
http://security.debian.org/dists/stable/updates/main/binary-sparc/php3-gd_3.0.18-0potato1.1_sparc.deb
http://security.debian.org/dists/stable/updates/main/binary-sparc/php3-imap_3.0.18-0potato1.1_sparc.deb
http://security.debian.org/dists/stable/updates/main/binary-sparc/php3-ldap_3.0.18-0potato1.1_sparc.deb
http://security.debian.org/dists/stable/updates/main/binary-sparc/php3-magick_3.0.18-0potato1.1_sparc.deb
http://security.debian.org/dists/stable/updates/main/binary-sparc/php3-mhash_3.0.18-0potato1.1_sparc.deb
http://security.debian.org/dists/stable/updates/main/binary-sparc/php3-mysql_3.0.18-0potato1.1_sparc.deb
http://security.debian.org/dists/stable/updates/main/binary-sparc/php3-pgsql_3.0.18-0potato1.1_sparc.deb
http://security.debian.org/dists/stable/updates/main/binary-sparc/php3-snmp_3.0.18-0potato1.1_sparc.deb
http://security.debian.org/dists/stable/updates/main/binary-sparc/php3-xml_3.0.18-0potato1.1_sparc.deb
http://security.debian.org/dists/stable/updates/main/binary-sparc/php3_3.0.18-0potato1.1_sparc.deb
http://security.debian.org/dists/stable/updates/main/binary-sparc/php4-cgi-gd_4.0.3pl1-0potato3_sparc.deb
http://security.debian.org/dists/stable/updates/main/binary-sparc/php4_4.0.3pl1-0potato3_sparc.deb
http://security.debian.org/dists/stable/updates/main/binary-sparc/php4-cgi-imap_4.0.3pl1-0potato3_sparc.deb
http://security.debian.org/dists/stable/updates/main/binary-sparc/php4-cgi-ldap_4.0.3pl1-0potato3_sparc.deb
http://security.debian.org/dists/stable/updates/main/binary-sparc/php4-cgi-mhash_4.0.3pl1-0potato3_sparc.deb
http://security.debian.org/dists/stable/updates/main/binary-sparc/php4-cgi-mysql_4.0.3pl1-0potato3_sparc.deb
http://security.debian.org/dists/stable/updates/main/binary-sparc/php4-cgi-pgsql_4.0.3pl1-0potato3_sparc.deb
http://security.debian.org/dists/stable/updates/main/binary-sparc/php4-cgi-snmp_4.0.3pl1-0potato3_sparc.deb
http://security.debian.org/dists/stable/updates/main/binary-sparc/php4-cgi-xml_4.0.3pl1-0potato3_sparc.deb
http://security.debian.org/dists/stable/updates/main/binary-sparc/php4-cgi_4.0.3pl1-0potato3_sparc.deb
http://security.debian.org/dists/stable/updates/main/binary-sparc/php4-gd_4.0.3pl1-0potato3_sparc.deb
http://security.debian.org/dists/stable/updates/main/binary-sparc/php4-imap_4.0.3pl1-0potato3_sparc.deb
http://security.debian.org/dists/stable/updates/main/binary-sparc/php4-ldap_4.0.3pl1-0potato3_sparc.deb
http://security.debian.org/dists/stable/updates/main/binary-sparc/php4-mhash_4.0.3pl1-0potato3_sparc.deb
http://security.debian.org/dists/stable/updates/main/binary-sparc/php4-mysql_4.0.3pl1-0potato3_sparc.deb
http://security.debian.org/dists/stable/updates/main/binary-sparc/php4-pgsql_4.0.3pl1-0potato3_sparc.deb
http://security.debian.org/dists/stable/updates/main/binary-sparc/php4-snmp_4.0.3pl1-0potato3_sparc.deb
http://security.debian.org/dists/stable/updates/main/binary-sparc/php4-xml_4.0.3pl1-0potato3_sparc.deb

一覧にあるファイルの MD5 チェックサムは勧告の原文にあります。