Bulletin d'alerte Debian

DSA-1331-1 php4 -- Plusieurs vulnérabilités

Date du rapport :
7 juillet 2007
Paquets concernés :
php4
Vulnérabilité :
Oui
Références dans la base de données de sécurité :
Dans le dictionnaire CVE du Mitre : CVE-2006-4486, CVE-2006-0207, CVE-2007-1864.
Plus de précisions :

Plusieurs vulnérabilités à distance ont été découvertes dans PHP, un langage de script embarqué dans le HTML côté serveur, cela peut conduire à l'exécution de code arbitraire. Le projet des expositions et vulnérabilités communes (CVE) identifie les problèmes suivants :

  • CVE-2006-0207

    Stefan Esser a découvert des vulnérabilités de découpe des réponses HTTP dans l'extension session. Cela n'affecte que la version 3.1 de Debian (Sarge).

  • CVE-2006-4486

    Stefan Esser a découvert qu'un débordement d'entier dans les routines d'allocation de mémoire permettait d'outrepasser les restrictions de limite de mémoire. Cela n'affecte que la version 3.1 de Debian (Sarge) sur les architectures 64 bits.

  • CVE-2007-1864

    On a découvert qu'un débordement de mémoire tampon dans l'extension xmlrpc permet l'exécution de code arbitraire.

Pour l'ancienne distribution stable (Sarge), ces problèmes ont été corrigés dans la version 4.3.10-22.

Pour la distribution stable (Etch), ces problèmes ont été corrigés dans la version 4.4.4-8+etch4.

La distribution instable (Sid) ne contient plus php4.

Nous vous recommandons de mettre à jour vos paquets de PHP. Les paquets de la distribution Sarge pour les architectures hppa, mips et powerpc ne sont pas encore disponibles à cause de problèmes sur les hôtes de construction. Ils seront fournis ultérieurement.

Corrigé dans :

Debian GNU/Linux 3.1 (sarge)

Source :
http://security.debian.org/pool/updates/main/p/php4/php4_4.3.10-22.dsc
http://security.debian.org/pool/updates/main/p/php4/php4_4.3.10-22.diff.gz
http://security.debian.org/pool/updates/main/p/php4/php4_4.3.10.orig.tar.gz
Composant indépendant de l'architecture :
http://security.debian.org/pool/updates/main/p/php4/php4-pear_4.3.10-22_all.deb
http://security.debian.org/pool/updates/main/p/php4/php4_4.3.10-22_all.deb
Alpha:
http://security.debian.org/pool/updates/main/p/php4/libapache-mod-php4_4.3.10-22_alpha.deb
http://security.debian.org/pool/updates/main/p/php4/libapache2-mod-php4_4.3.10-22_alpha.deb
http://security.debian.org/pool/updates/main/p/php4/php4-cgi_4.3.10-22_alpha.deb
http://security.debian.org/pool/updates/main/p/php4/php4-cli_4.3.10-22_alpha.deb
http://security.debian.org/pool/updates/main/p/php4/php4-common_4.3.10-22_alpha.deb
http://security.debian.org/pool/updates/main/p/php4/php4-curl_4.3.10-22_alpha.deb
http://security.debian.org/pool/updates/main/p/php4/php4-dev_4.3.10-22_alpha.deb
http://security.debian.org/pool/updates/main/p/php4/php4-domxml_4.3.10-22_alpha.deb
http://security.debian.org/pool/updates/main/p/php4/php4-gd_4.3.10-22_alpha.deb
http://security.debian.org/pool/updates/main/p/php4/php4-imap_4.3.10-22_alpha.deb
http://security.debian.org/pool/updates/main/p/php4/php4-ldap_4.3.10-22_alpha.deb
http://security.debian.org/pool/updates/main/p/php4/php4-mcal_4.3.10-22_alpha.deb
http://security.debian.org/pool/updates/main/p/php4/php4-mhash_4.3.10-22_alpha.deb
http://security.debian.org/pool/updates/main/p/php4/php4-mysql_4.3.10-22_alpha.deb
http://security.debian.org/pool/updates/main/p/php4/php4-odbc_4.3.10-22_alpha.deb
http://security.debian.org/pool/updates/main/p/php4/php4-recode_4.3.10-22_alpha.deb
http://security.debian.org/pool/updates/main/p/php4/php4-snmp_4.3.10-22_alpha.deb
http://security.debian.org/pool/updates/main/p/php4/php4-sybase_4.3.10-22_alpha.deb
http://security.debian.org/pool/updates/main/p/php4/php4-xslt_4.3.10-22_alpha.deb
AMD64:
http://security.debian.org/pool/updates/main/p/php4/libapache-mod-php4_4.3.10-22_amd64.deb
http://security.debian.org/pool/updates/main/p/php4/libapache2-mod-php4_4.3.10-22_amd64.deb
http://security.debian.org/pool/updates/main/p/php4/php4-cgi_4.3.10-22_amd64.deb
http://security.debian.org/pool/updates/main/p/php4/php4-cli_4.3.10-22_amd64.deb
http://security.debian.org/pool/updates/main/p/php4/php4-common_4.3.10-22_amd64.deb
http://security.debian.org/pool/updates/main/p/php4/php4-curl_4.3.10-22_amd64.deb
http://security.debian.org/pool/updates/main/p/php4/php4-dev_4.3.10-22_amd64.deb
http://security.debian.org/pool/updates/main/p/php4/php4-domxml_4.3.10-22_amd64.deb
http://security.debian.org/pool/updates/main/p/php4/php4-gd_4.3.10-22_amd64.deb
http://security.debian.org/pool/updates/main/p/php4/php4-imap_4.3.10-22_amd64.deb
http://security.debian.org/pool/updates/main/p/php4/php4-ldap_4.3.10-22_amd64.deb
http://security.debian.org/pool/updates/main/p/php4/php4-mcal_4.3.10-22_amd64.deb
http://security.debian.org/pool/updates/main/p/php4/php4-mhash_4.3.10-22_amd64.deb
http://security.debian.org/pool/updates/main/p/php4/php4-mysql_4.3.10-22_amd64.deb
http://security.debian.org/pool/updates/main/p/php4/php4-odbc_4.3.10-22_amd64.deb
http://security.debian.org/pool/updates/main/p/php4/php4-recode_4.3.10-22_amd64.deb
http://security.debian.org/pool/updates/main/p/php4/php4-snmp_4.3.10-22_amd64.deb
http://security.debian.org/pool/updates/main/p/php4/php4-sybase_4.3.10-22_amd64.deb
http://security.debian.org/pool/updates/main/p/php4/php4-xslt_4.3.10-22_amd64.deb
ARM:
http://security.debian.org/pool/updates/main/p/php4/libapache-mod-php4_4.3.10-22_arm.deb
http://security.debian.org/pool/updates/main/p/php4/libapache2-mod-php4_4.3.10-22_arm.deb
http://security.debian.org/pool/updates/main/p/php4/php4-cgi_4.3.10-22_arm.deb
http://security.debian.org/pool/updates/main/p/php4/php4-cli_4.3.10-22_arm.deb
http://security.debian.org/pool/updates/main/p/php4/php4-common_4.3.10-22_arm.deb
http://security.debian.org/pool/updates/main/p/php4/php4-curl_4.3.10-22_arm.deb
http://security.debian.org/pool/updates/main/p/php4/php4-dev_4.3.10-22_arm.deb
http://security.debian.org/pool/updates/main/p/php4/php4-domxml_4.3.10-22_arm.deb
http://security.debian.org/pool/updates/main/p/php4/php4-gd_4.3.10-22_arm.deb
http://security.debian.org/pool/updates/main/p/php4/php4-imap_4.3.10-22_arm.deb
http://security.debian.org/pool/updates/main/p/php4/php4-ldap_4.3.10-22_arm.deb
http://security.debian.org/pool/updates/main/p/php4/php4-mcal_4.3.10-22_arm.deb
http://security.debian.org/pool/updates/main/p/php4/php4-mhash_4.3.10-22_arm.deb
http://security.debian.org/pool/updates/main/p/php4/php4-mysql_4.3.10-22_arm.deb
http://security.debian.org/pool/updates/main/p/php4/php4-odbc_4.3.10-22_arm.deb
http://security.debian.org/pool/updates/main/p/php4/php4-recode_4.3.10-22_arm.deb
http://security.debian.org/pool/updates/main/p/php4/php4-snmp_4.3.10-22_arm.deb
http://security.debian.org/pool/updates/main/p/php4/php4-sybase_4.3.10-22_arm.deb
http://security.debian.org/pool/updates/main/p/php4/php4-xslt_4.3.10-22_arm.deb
Intel IA-32:
http://security.debian.org/pool/updates/main/p/php4/libapache-mod-php4_4.3.10-22_i386.deb
http://security.debian.org/pool/updates/main/p/php4/libapache2-mod-php4_4.3.10-22_i386.deb
http://security.debian.org/pool/updates/main/p/php4/php4-cgi_4.3.10-22_i386.deb
http://security.debian.org/pool/updates/main/p/php4/php4-cli_4.3.10-22_i386.deb
http://security.debian.org/pool/updates/main/p/php4/php4-common_4.3.10-22_i386.deb
http://security.debian.org/pool/updates/main/p/php4/php4-curl_4.3.10-22_i386.deb
http://security.debian.org/pool/updates/main/p/php4/php4-dev_4.3.10-22_i386.deb
http://security.debian.org/pool/updates/main/p/php4/php4-domxml_4.3.10-22_i386.deb
http://security.debian.org/pool/updates/main/p/php4/php4-gd_4.3.10-22_i386.deb
http://security.debian.org/pool/updates/main/p/php4/php4-imap_4.3.10-22_i386.deb
http://security.debian.org/pool/updates/main/p/php4/php4-ldap_4.3.10-22_i386.deb
http://security.debian.org/pool/updates/main/p/php4/php4-mcal_4.3.10-22_i386.deb
http://security.debian.org/pool/updates/main/p/php4/php4-mhash_4.3.10-22_i386.deb
http://security.debian.org/pool/updates/main/p/php4/php4-mysql_4.3.10-22_i386.deb
http://security.debian.org/pool/updates/main/p/php4/php4-odbc_4.3.10-22_i386.deb
http://security.debian.org/pool/updates/main/p/php4/php4-recode_4.3.10-22_i386.deb
http://security.debian.org/pool/updates/main/p/php4/php4-snmp_4.3.10-22_i386.deb
http://security.debian.org/pool/updates/main/p/php4/php4-sybase_4.3.10-22_i386.deb
http://security.debian.org/pool/updates/main/p/php4/php4-xslt_4.3.10-22_i386.deb
Intel IA-64:
http://security.debian.org/pool/updates/main/p/php4/libapache-mod-php4_4.3.10-22_ia64.deb
http://security.debian.org/pool/updates/main/p/php4/libapache2-mod-php4_4.3.10-22_ia64.deb
http://security.debian.org/pool/updates/main/p/php4/php4-cgi_4.3.10-22_ia64.deb
http://security.debian.org/pool/updates/main/p/php4/php4-cli_4.3.10-22_ia64.deb
http://security.debian.org/pool/updates/main/p/php4/php4-common_4.3.10-22_ia64.deb
http://security.debian.org/pool/updates/main/p/php4/php4-curl_4.3.10-22_ia64.deb
http://security.debian.org/pool/updates/main/p/php4/php4-dev_4.3.10-22_ia64.deb
http://security.debian.org/pool/updates/main/p/php4/php4-domxml_4.3.10-22_ia64.deb
http://security.debian.org/pool/updates/main/p/php4/php4-gd_4.3.10-22_ia64.deb
http://security.debian.org/pool/updates/main/p/php4/php4-imap_4.3.10-22_ia64.deb
http://security.debian.org/pool/updates/main/p/php4/php4-ldap_4.3.10-22_ia64.deb
http://security.debian.org/pool/updates/main/p/php4/php4-mcal_4.3.10-22_ia64.deb
http://security.debian.org/pool/updates/main/p/php4/php4-mhash_4.3.10-22_ia64.deb
http://security.debian.org/pool/updates/main/p/php4/php4-mysql_4.3.10-22_ia64.deb
http://security.debian.org/pool/updates/main/p/php4/php4-odbc_4.3.10-22_ia64.deb
http://security.debian.org/pool/updates/main/p/php4/php4-recode_4.3.10-22_ia64.deb
http://security.debian.org/pool/updates/main/p/php4/php4-snmp_4.3.10-22_ia64.deb
http://security.debian.org/pool/updates/main/p/php4/php4-sybase_4.3.10-22_ia64.deb
http://security.debian.org/pool/updates/main/p/php4/php4-xslt_4.3.10-22_ia64.deb
Motorola 680x0:
http://security.debian.org/pool/updates/main/p/php4/libapache-mod-php4_4.3.10-22_m68k.deb
http://security.debian.org/pool/updates/main/p/php4/libapache2-mod-php4_4.3.10-22_m68k.deb
http://security.debian.org/pool/updates/main/p/php4/php4-cgi_4.3.10-22_m68k.deb
http://security.debian.org/pool/updates/main/p/php4/php4-cli_4.3.10-22_m68k.deb
http://security.debian.org/pool/updates/main/p/php4/php4-common_4.3.10-22_m68k.deb
http://security.debian.org/pool/updates/main/p/php4/php4-curl_4.3.10-22_m68k.deb
http://security.debian.org/pool/updates/main/p/php4/php4-dev_4.3.10-22_m68k.deb
http://security.debian.org/pool/updates/main/p/php4/php4-domxml_4.3.10-22_m68k.deb
http://security.debian.org/pool/updates/main/p/php4/php4-gd_4.3.10-22_m68k.deb
http://security.debian.org/pool/updates/main/p/php4/php4-imap_4.3.10-22_m68k.deb
http://security.debian.org/pool/updates/main/p/php4/php4-ldap_4.3.10-22_m68k.deb
http://security.debian.org/pool/updates/main/p/php4/php4-mcal_4.3.10-22_m68k.deb
http://security.debian.org/pool/updates/main/p/php4/php4-mhash_4.3.10-22_m68k.deb
http://security.debian.org/pool/updates/main/p/php4/php4-mysql_4.3.10-22_m68k.deb
http://security.debian.org/pool/updates/main/p/php4/php4-odbc_4.3.10-22_m68k.deb
http://security.debian.org/pool/updates/main/p/php4/php4-recode_4.3.10-22_m68k.deb
http://security.debian.org/pool/updates/main/p/php4/php4-snmp_4.3.10-22_m68k.deb
http://security.debian.org/pool/updates/main/p/php4/php4-sybase_4.3.10-22_m68k.deb
http://security.debian.org/pool/updates/main/p/php4/php4-xslt_4.3.10-22_m68k.deb
Little endian MIPS:
http://security.debian.org/pool/updates/main/p/php4/libapache-mod-php4_4.3.10-22_mipsel.deb
http://security.debian.org/pool/updates/main/p/php4/libapache2-mod-php4_4.3.10-22_mipsel.deb
http://security.debian.org/pool/updates/main/p/php4/php4-cgi_4.3.10-22_mipsel.deb
http://security.debian.org/pool/updates/main/p/php4/php4-cli_4.3.10-22_mipsel.deb
http://security.debian.org/pool/updates/main/p/php4/php4-common_4.3.10-22_mipsel.deb
http://security.debian.org/pool/updates/main/p/php4/php4-curl_4.3.10-22_mipsel.deb
http://security.debian.org/pool/updates/main/p/php4/php4-dev_4.3.10-22_mipsel.deb
http://security.debian.org/pool/updates/main/p/php4/php4-domxml_4.3.10-22_mipsel.deb
http://security.debian.org/pool/updates/main/p/php4/php4-gd_4.3.10-22_mipsel.deb
http://security.debian.org/pool/updates/main/p/php4/php4-imap_4.3.10-22_mipsel.deb
http://security.debian.org/pool/updates/main/p/php4/php4-ldap_4.3.10-22_mipsel.deb
http://security.debian.org/pool/updates/main/p/php4/php4-mcal_4.3.10-22_mipsel.deb
http://security.debian.org/pool/updates/main/p/php4/php4-mhash_4.3.10-22_mipsel.deb
http://security.debian.org/pool/updates/main/p/php4/php4-mysql_4.3.10-22_mipsel.deb
http://security.debian.org/pool/updates/main/p/php4/php4-odbc_4.3.10-22_mipsel.deb
http://security.debian.org/pool/updates/main/p/php4/php4-recode_4.3.10-22_mipsel.deb
http://security.debian.org/pool/updates/main/p/php4/php4-snmp_4.3.10-22_mipsel.deb
http://security.debian.org/pool/updates/main/p/php4/php4-sybase_4.3.10-22_mipsel.deb
http://security.debian.org/pool/updates/main/p/php4/php4-xslt_4.3.10-22_mipsel.deb
IBM S/390:
http://security.debian.org/pool/updates/main/p/php4/libapache-mod-php4_4.3.10-22_s390.deb
http://security.debian.org/pool/updates/main/p/php4/libapache2-mod-php4_4.3.10-22_s390.deb
http://security.debian.org/pool/updates/main/p/php4/php4-cgi_4.3.10-22_s390.deb
http://security.debian.org/pool/updates/main/p/php4/php4-cli_4.3.10-22_s390.deb
http://security.debian.org/pool/updates/main/p/php4/php4-common_4.3.10-22_s390.deb
http://security.debian.org/pool/updates/main/p/php4/php4-curl_4.3.10-22_s390.deb
http://security.debian.org/pool/updates/main/p/php4/php4-dev_4.3.10-22_s390.deb
http://security.debian.org/pool/updates/main/p/php4/php4-domxml_4.3.10-22_s390.deb
http://security.debian.org/pool/updates/main/p/php4/php4-gd_4.3.10-22_s390.deb
http://security.debian.org/pool/updates/main/p/php4/php4-imap_4.3.10-22_s390.deb
http://security.debian.org/pool/updates/main/p/php4/php4-ldap_4.3.10-22_s390.deb
http://security.debian.org/pool/updates/main/p/php4/php4-mcal_4.3.10-22_s390.deb
http://security.debian.org/pool/updates/main/p/php4/php4-mhash_4.3.10-22_s390.deb
http://security.debian.org/pool/updates/main/p/php4/php4-mysql_4.3.10-22_s390.deb
http://security.debian.org/pool/updates/main/p/php4/php4-odbc_4.3.10-22_s390.deb
http://security.debian.org/pool/updates/main/p/php4/php4-recode_4.3.10-22_s390.deb
http://security.debian.org/pool/updates/main/p/php4/php4-snmp_4.3.10-22_s390.deb
http://security.debian.org/pool/updates/main/p/php4/php4-sybase_4.3.10-22_s390.deb
http://security.debian.org/pool/updates/main/p/php4/php4-xslt_4.3.10-22_s390.deb
Sun Sparc:
http://security.debian.org/pool/updates/main/p/php4/libapache-mod-php4_4.3.10-22_sparc.deb
http://security.debian.org/pool/updates/main/p/php4/libapache2-mod-php4_4.3.10-22_sparc.deb
http://security.debian.org/pool/updates/main/p/php4/php4-cgi_4.3.10-22_sparc.deb
http://security.debian.org/pool/updates/main/p/php4/php4-cli_4.3.10-22_sparc.deb
http://security.debian.org/pool/updates/main/p/php4/php4-common_4.3.10-22_sparc.deb
http://security.debian.org/pool/updates/main/p/php4/php4-curl_4.3.10-22_sparc.deb
http://security.debian.org/pool/updates/main/p/php4/php4-dev_4.3.10-22_sparc.deb
http://security.debian.org/pool/updates/main/p/php4/php4-domxml_4.3.10-22_sparc.deb
http://security.debian.org/pool/updates/main/p/php4/php4-gd_4.3.10-22_sparc.deb
http://security.debian.org/pool/updates/main/p/php4/php4-imap_4.3.10-22_sparc.deb
http://security.debian.org/pool/updates/main/p/php4/php4-ldap_4.3.10-22_sparc.deb
http://security.debian.org/pool/updates/main/p/php4/php4-mcal_4.3.10-22_sparc.deb
http://security.debian.org/pool/updates/main/p/php4/php4-mhash_4.3.10-22_sparc.deb
http://security.debian.org/pool/updates/main/p/php4/php4-mysql_4.3.10-22_sparc.deb
http://security.debian.org/pool/updates/main/p/php4/php4-odbc_4.3.10-22_sparc.deb
http://security.debian.org/pool/updates/main/p/php4/php4-recode_4.3.10-22_sparc.deb
http://security.debian.org/pool/updates/main/p/php4/php4-snmp_4.3.10-22_sparc.deb
http://security.debian.org/pool/updates/main/p/php4/php4-sybase_4.3.10-22_sparc.deb
http://security.debian.org/pool/updates/main/p/php4/php4-xslt_4.3.10-22_sparc.deb

Debian GNU/Linux 4.0 (etch)

Source :
http://security.debian.org/pool/updates/main/p/php4/php4_4.4.4-8+etch4.dsc
http://security.debian.org/pool/updates/main/p/php4/php4_4.4.4-8+etch4.diff.gz
http://security.debian.org/pool/updates/main/p/php4/php4_4.4.4.orig.tar.gz
Composant indépendant de l'architecture :
http://security.debian.org/pool/updates/main/p/php4/php4-pear_4.4.4-8+etch4_all.deb
http://security.debian.org/pool/updates/main/p/php4/php4_4.4.4-8+etch4_all.deb
Alpha:
http://security.debian.org/pool/updates/main/p/php4/libapache-mod-php4_4.4.4-8+etch4_alpha.deb
http://security.debian.org/pool/updates/main/p/php4/libapache2-mod-php4_4.4.4-8+etch4_alpha.deb
http://security.debian.org/pool/updates/main/p/php4/php4-cgi_4.4.4-8+etch4_alpha.deb
http://security.debian.org/pool/updates/main/p/php4/php4-cli_4.4.4-8+etch4_alpha.deb
http://security.debian.org/pool/updates/main/p/php4/php4-common_4.4.4-8+etch4_alpha.deb
http://security.debian.org/pool/updates/main/p/php4/php4-curl_4.4.4-8+etch4_alpha.deb
http://security.debian.org/pool/updates/main/p/php4/php4-dev_4.4.4-8+etch4_alpha.deb
http://security.debian.org/pool/updates/main/p/php4/php4-domxml_4.4.4-8+etch4_alpha.deb
http://security.debian.org/pool/updates/main/p/php4/php4-gd_4.4.4-8+etch4_alpha.deb
http://security.debian.org/pool/updates/main/p/php4/php4-imap_4.4.4-8+etch4_alpha.deb
http://security.debian.org/pool/updates/main/p/php4/php4-ldap_4.4.4-8+etch4_alpha.deb
http://security.debian.org/pool/updates/main/p/php4/php4-mcal_4.4.4-8+etch4_alpha.deb
http://security.debian.org/pool/updates/main/p/php4/php4-mcrypt_4.4.4-8+etch4_alpha.deb
http://security.debian.org/pool/updates/main/p/php4/php4-mhash_4.4.4-8+etch4_alpha.deb
http://security.debian.org/pool/updates/main/p/php4/php4-mysql_4.4.4-8+etch4_alpha.deb
http://security.debian.org/pool/updates/main/p/php4/php4-odbc_4.4.4-8+etch4_alpha.deb
http://security.debian.org/pool/updates/main/p/php4/php4-pgsql_4.4.4-8+etch4_alpha.deb
http://security.debian.org/pool/updates/main/p/php4/php4-pspell_4.4.4-8+etch4_alpha.deb
http://security.debian.org/pool/updates/main/p/php4/php4-recode_4.4.4-8+etch4_alpha.deb
http://security.debian.org/pool/updates/main/p/php4/php4-snmp_4.4.4-8+etch4_alpha.deb
http://security.debian.org/pool/updates/main/p/php4/php4-sybase_4.4.4-8+etch4_alpha.deb
http://security.debian.org/pool/updates/main/p/php4/php4-xslt_4.4.4-8+etch4_alpha.deb
AMD64:
http://security.debian.org/pool/updates/main/p/php4/libapache-mod-php4_4.4.4-8+etch4_amd64.deb
http://security.debian.org/pool/updates/main/p/php4/libapache2-mod-php4_4.4.4-8+etch4_amd64.deb
http://security.debian.org/pool/updates/main/p/php4/php4-cgi_4.4.4-8+etch4_amd64.deb
http://security.debian.org/pool/updates/main/p/php4/php4-cli_4.4.4-8+etch4_amd64.deb
http://security.debian.org/pool/updates/main/p/php4/php4-common_4.4.4-8+etch4_amd64.deb
http://security.debian.org/pool/updates/main/p/php4/php4-curl_4.4.4-8+etch4_amd64.deb
http://security.debian.org/pool/updates/main/p/php4/php4-dev_4.4.4-8+etch4_amd64.deb
http://security.debian.org/pool/updates/main/p/php4/php4-domxml_4.4.4-8+etch4_amd64.deb
http://security.debian.org/pool/updates/main/p/php4/php4-gd_4.4.4-8+etch4_amd64.deb
http://security.debian.org/pool/updates/main/p/php4/php4-imap_4.4.4-8+etch4_amd64.deb
http://security.debian.org/pool/updates/main/p/php4/php4-interbase_4.4.4-8+etch4_amd64.deb
http://security.debian.org/pool/updates/main/p/php4/php4-ldap_4.4.4-8+etch4_amd64.deb
http://security.debian.org/pool/updates/main/p/php4/php4-mcal_4.4.4-8+etch4_amd64.deb
http://security.debian.org/pool/updates/main/p/php4/php4-mcrypt_4.4.4-8+etch4_amd64.deb
http://security.debian.org/pool/updates/main/p/php4/php4-mhash_4.4.4-8+etch4_amd64.deb
http://security.debian.org/pool/updates/main/p/php4/php4-mysql_4.4.4-8+etch4_amd64.deb
http://security.debian.org/pool/updates/main/p/php4/php4-odbc_4.4.4-8+etch4_amd64.deb
http://security.debian.org/pool/updates/main/p/php4/php4-pgsql_4.4.4-8+etch4_amd64.deb
http://security.debian.org/pool/updates/main/p/php4/php4-pspell_4.4.4-8+etch4_amd64.deb
http://security.debian.org/pool/updates/main/p/php4/php4-recode_4.4.4-8+etch4_amd64.deb
http://security.debian.org/pool/updates/main/p/php4/php4-snmp_4.4.4-8+etch4_amd64.deb
http://security.debian.org/pool/updates/main/p/php4/php4-sybase_4.4.4-8+etch4_amd64.deb
http://security.debian.org/pool/updates/main/p/php4/php4-xslt_4.4.4-8+etch4_amd64.deb
ARM:
http://security.debian.org/pool/updates/main/p/php4/libapache-mod-php4_4.4.4-8+etch4_arm.deb
http://security.debian.org/pool/updates/main/p/php4/libapache2-mod-php4_4.4.4-8+etch4_arm.deb
http://security.debian.org/pool/updates/main/p/php4/php4-cgi_4.4.4-8+etch4_arm.deb
http://security.debian.org/pool/updates/main/p/php4/php4-cli_4.4.4-8+etch4_arm.deb
http://security.debian.org/pool/updates/main/p/php4/php4-common_4.4.4-8+etch4_arm.deb
http://security.debian.org/pool/updates/main/p/php4/php4-curl_4.4.4-8+etch4_arm.deb
http://security.debian.org/pool/updates/main/p/php4/php4-dev_4.4.4-8+etch4_arm.deb
http://security.debian.org/pool/updates/main/p/php4/php4-domxml_4.4.4-8+etch4_arm.deb
http://security.debian.org/pool/updates/main/p/php4/php4-gd_4.4.4-8+etch4_arm.deb
http://security.debian.org/pool/updates/main/p/php4/php4-imap_4.4.4-8+etch4_arm.deb
http://security.debian.org/pool/updates/main/p/php4/php4-ldap_4.4.4-8+etch4_arm.deb
http://security.debian.org/pool/updates/main/p/php4/php4-mcal_4.4.4-8+etch4_arm.deb
http://security.debian.org/pool/updates/main/p/php4/php4-mcrypt_4.4.4-8+etch4_arm.deb
http://security.debian.org/pool/updates/main/p/php4/php4-mhash_4.4.4-8+etch4_arm.deb
http://security.debian.org/pool/updates/main/p/php4/php4-mysql_4.4.4-8+etch4_arm.deb
http://security.debian.org/pool/updates/main/p/php4/php4-odbc_4.4.4-8+etch4_arm.deb
http://security.debian.org/pool/updates/main/p/php4/php4-pgsql_4.4.4-8+etch4_arm.deb
http://security.debian.org/pool/updates/main/p/php4/php4-pspell_4.4.4-8+etch4_arm.deb
http://security.debian.org/pool/updates/main/p/php4/php4-recode_4.4.4-8+etch4_arm.deb
http://security.debian.org/pool/updates/main/p/php4/php4-snmp_4.4.4-8+etch4_arm.deb
http://security.debian.org/pool/updates/main/p/php4/php4-sybase_4.4.4-8+etch4_arm.deb
http://security.debian.org/pool/updates/main/p/php4/php4-xslt_4.4.4-8+etch4_arm.deb
HPPA:
http://security.debian.org/pool/updates/main/p/php4/libapache-mod-php4_4.4.4-8+etch4_hppa.deb
http://security.debian.org/pool/updates/main/p/php4/libapache2-mod-php4_4.4.4-8+etch4_hppa.deb
http://security.debian.org/pool/updates/main/p/php4/php4-cgi_4.4.4-8+etch4_hppa.deb
http://security.debian.org/pool/updates/main/p/php4/php4-cli_4.4.4-8+etch4_hppa.deb
http://security.debian.org/pool/updates/main/p/php4/php4-common_4.4.4-8+etch4_hppa.deb
http://security.debian.org/pool/updates/main/p/php4/php4-curl_4.4.4-8+etch4_hppa.deb
http://security.debian.org/pool/updates/main/p/php4/php4-dev_4.4.4-8+etch4_hppa.deb
http://security.debian.org/pool/updates/main/p/php4/php4-domxml_4.4.4-8+etch4_hppa.deb
http://security.debian.org/pool/updates/main/p/php4/php4-gd_4.4.4-8+etch4_hppa.deb
http://security.debian.org/pool/updates/main/p/php4/php4-imap_4.4.4-8+etch4_hppa.deb
http://security.debian.org/pool/updates/main/p/php4/php4-ldap_4.4.4-8+etch4_hppa.deb
http://security.debian.org/pool/updates/main/p/php4/php4-mcal_4.4.4-8+etch4_hppa.deb
http://security.debian.org/pool/updates/main/p/php4/php4-mcrypt_4.4.4-8+etch4_hppa.deb
http://security.debian.org/pool/updates/main/p/php4/php4-mhash_4.4.4-8+etch4_hppa.deb
http://security.debian.org/pool/updates/main/p/php4/php4-mysql_4.4.4-8+etch4_hppa.deb
http://security.debian.org/pool/updates/main/p/php4/php4-odbc_4.4.4-8+etch4_hppa.deb
http://security.debian.org/pool/updates/main/p/php4/php4-pgsql_4.4.4-8+etch4_hppa.deb
http://security.debian.org/pool/updates/main/p/php4/php4-pspell_4.4.4-8+etch4_hppa.deb
http://security.debian.org/pool/updates/main/p/php4/php4-recode_4.4.4-8+etch4_hppa.deb
http://security.debian.org/pool/updates/main/p/php4/php4-snmp_4.4.4-8+etch4_hppa.deb
http://security.debian.org/pool/updates/main/p/php4/php4-sybase_4.4.4-8+etch4_hppa.deb
http://security.debian.org/pool/updates/main/p/php4/php4-xslt_4.4.4-8+etch4_hppa.deb
Intel IA-32:
http://security.debian.org/pool/updates/main/p/php4/libapache-mod-php4_4.4.4-8+etch4_i386.deb
http://security.debian.org/pool/updates/main/p/php4/libapache2-mod-php4_4.4.4-8+etch4_i386.deb
http://security.debian.org/pool/updates/main/p/php4/php4-cgi_4.4.4-8+etch4_i386.deb
http://security.debian.org/pool/updates/main/p/php4/php4-cli_4.4.4-8+etch4_i386.deb
http://security.debian.org/pool/updates/main/p/php4/php4-common_4.4.4-8+etch4_i386.deb
http://security.debian.org/pool/updates/main/p/php4/php4-curl_4.4.4-8+etch4_i386.deb
http://security.debian.org/pool/updates/main/p/php4/php4-dev_4.4.4-8+etch4_i386.deb
http://security.debian.org/pool/updates/main/p/php4/php4-domxml_4.4.4-8+etch4_i386.deb
http://security.debian.org/pool/updates/main/p/php4/php4-gd_4.4.4-8+etch4_i386.deb
http://security.debian.org/pool/updates/main/p/php4/php4-imap_4.4.4-8+etch4_i386.deb
http://security.debian.org/pool/updates/main/p/php4/php4-interbase_4.4.4-8+etch4_i386.deb
http://security.debian.org/pool/updates/main/p/php4/php4-ldap_4.4.4-8+etch4_i386.deb
http://security.debian.org/pool/updates/main/p/php4/php4-mcal_4.4.4-8+etch4_i386.deb
http://security.debian.org/pool/updates/main/p/php4/php4-mcrypt_4.4.4-8+etch4_i386.deb
http://security.debian.org/pool/updates/main/p/php4/php4-mhash_4.4.4-8+etch4_i386.deb
http://security.debian.org/pool/updates/main/p/php4/php4-mysql_4.4.4-8+etch4_i386.deb
http://security.debian.org/pool/updates/main/p/php4/php4-odbc_4.4.4-8+etch4_i386.deb
http://security.debian.org/pool/updates/main/p/php4/php4-pgsql_4.4.4-8+etch4_i386.deb
http://security.debian.org/pool/updates/main/p/php4/php4-pspell_4.4.4-8+etch4_i386.deb
http://security.debian.org/pool/updates/main/p/php4/php4-recode_4.4.4-8+etch4_i386.deb
http://security.debian.org/pool/updates/main/p/php4/php4-snmp_4.4.4-8+etch4_i386.deb
http://security.debian.org/pool/updates/main/p/php4/php4-sybase_4.4.4-8+etch4_i386.deb
http://security.debian.org/pool/updates/main/p/php4/php4-xslt_4.4.4-8+etch4_i386.deb
Intel IA-64:
http://security.debian.org/pool/updates/main/p/php4/libapache-mod-php4_4.4.4-8+etch4_ia64.deb
http://security.debian.org/pool/updates/main/p/php4/libapache2-mod-php4_4.4.4-8+etch4_ia64.deb
http://security.debian.org/pool/updates/main/p/php4/php4-cgi_4.4.4-8+etch4_ia64.deb
http://security.debian.org/pool/updates/main/p/php4/php4-cli_4.4.4-8+etch4_ia64.deb
http://security.debian.org/pool/updates/main/p/php4/php4-common_4.4.4-8+etch4_ia64.deb
http://security.debian.org/pool/updates/main/p/php4/php4-curl_4.4.4-8+etch4_ia64.deb
http://security.debian.org/pool/updates/main/p/php4/php4-dev_4.4.4-8+etch4_ia64.deb
http://security.debian.org/pool/updates/main/p/php4/php4-domxml_4.4.4-8+etch4_ia64.deb
http://security.debian.org/pool/updates/main/p/php4/php4-gd_4.4.4-8+etch4_ia64.deb
http://security.debian.org/pool/updates/main/p/php4/php4-imap_4.4.4-8+etch4_ia64.deb
http://security.debian.org/pool/updates/main/p/php4/php4-ldap_4.4.4-8+etch4_ia64.deb
http://security.debian.org/pool/updates/main/p/php4/php4-mcal_4.4.4-8+etch4_ia64.deb
http://security.debian.org/pool/updates/main/p/php4/php4-mcrypt_4.4.4-8+etch4_ia64.deb
http://security.debian.org/pool/updates/main/p/php4/php4-mhash_4.4.4-8+etch4_ia64.deb
http://security.debian.org/pool/updates/main/p/php4/php4-mysql_4.4.4-8+etch4_ia64.deb
http://security.debian.org/pool/updates/main/p/php4/php4-odbc_4.4.4-8+etch4_ia64.deb
http://security.debian.org/pool/updates/main/p/php4/php4-pgsql_4.4.4-8+etch4_ia64.deb
http://security.debian.org/pool/updates/main/p/php4/php4-pspell_4.4.4-8+etch4_ia64.deb
http://security.debian.org/pool/updates/main/p/php4/php4-recode_4.4.4-8+etch4_ia64.deb
http://security.debian.org/pool/updates/main/p/php4/php4-snmp_4.4.4-8+etch4_ia64.deb
http://security.debian.org/pool/updates/main/p/php4/php4-sybase_4.4.4-8+etch4_ia64.deb
http://security.debian.org/pool/updates/main/p/php4/php4-xslt_4.4.4-8+etch4_ia64.deb
Little endian MIPS:
http://security.debian.org/pool/updates/main/p/php4/libapache-mod-php4_4.4.4-8+etch4_mipsel.deb
http://security.debian.org/pool/updates/main/p/php4/libapache2-mod-php4_4.4.4-8+etch4_mipsel.deb
http://security.debian.org/pool/updates/main/p/php4/php4-cgi_4.4.4-8+etch4_mipsel.deb
http://security.debian.org/pool/updates/main/p/php4/php4-cli_4.4.4-8+etch4_mipsel.deb
http://security.debian.org/pool/updates/main/p/php4/php4-common_4.4.4-8+etch4_mipsel.deb
http://security.debian.org/pool/updates/main/p/php4/php4-curl_4.4.4-8+etch4_mipsel.deb
http://security.debian.org/pool/updates/main/p/php4/php4-dev_4.4.4-8+etch4_mipsel.deb
http://security.debian.org/pool/updates/main/p/php4/php4-domxml_4.4.4-8+etch4_mipsel.deb
http://security.debian.org/pool/updates/main/p/php4/php4-gd_4.4.4-8+etch4_mipsel.deb
http://security.debian.org/pool/updates/main/p/php4/php4-imap_4.4.4-8+etch4_mipsel.deb
http://security.debian.org/pool/updates/main/p/php4/php4-ldap_4.4.4-8+etch4_mipsel.deb
http://security.debian.org/pool/updates/main/p/php4/php4-mcal_4.4.4-8+etch4_mipsel.deb
http://security.debian.org/pool/updates/main/p/php4/php4-mcrypt_4.4.4-8+etch4_mipsel.deb
http://security.debian.org/pool/updates/main/p/php4/php4-mhash_4.4.4-8+etch4_mipsel.deb
http://security.debian.org/pool/updates/main/p/php4/php4-mysql_4.4.4-8+etch4_mipsel.deb
http://security.debian.org/pool/updates/main/p/php4/php4-odbc_4.4.4-8+etch4_mipsel.deb
http://security.debian.org/pool/updates/main/p/php4/php4-pgsql_4.4.4-8+etch4_mipsel.deb
http://security.debian.org/pool/updates/main/p/php4/php4-pspell_4.4.4-8+etch4_mipsel.deb
http://security.debian.org/pool/updates/main/p/php4/php4-recode_4.4.4-8+etch4_mipsel.deb
http://security.debian.org/pool/updates/main/p/php4/php4-snmp_4.4.4-8+etch4_mipsel.deb
http://security.debian.org/pool/updates/main/p/php4/php4-sybase_4.4.4-8+etch4_mipsel.deb
http://security.debian.org/pool/updates/main/p/php4/php4-xslt_4.4.4-8+etch4_mipsel.deb
PowerPC:
http://security.debian.org/pool/updates/main/p/php4/libapache-mod-php4_4.4.4-8+etch4_powerpc.deb
http://security.debian.org/pool/updates/main/p/php4/libapache2-mod-php4_4.4.4-8+etch4_powerpc.deb
http://security.debian.org/pool/updates/main/p/php4/php4-cgi_4.4.4-8+etch4_powerpc.deb
http://security.debian.org/pool/updates/main/p/php4/php4-cli_4.4.4-8+etch4_powerpc.deb
http://security.debian.org/pool/updates/main/p/php4/php4-common_4.4.4-8+etch4_powerpc.deb
http://security.debian.org/pool/updates/main/p/php4/php4-curl_4.4.4-8+etch4_powerpc.deb
http://security.debian.org/pool/updates/main/p/php4/php4-dev_4.4.4-8+etch4_powerpc.deb
http://security.debian.org/pool/updates/main/p/php4/php4-domxml_4.4.4-8+etch4_powerpc.deb
http://security.debian.org/pool/updates/main/p/php4/php4-gd_4.4.4-8+etch4_powerpc.deb
http://security.debian.org/pool/updates/main/p/php4/php4-imap_4.4.4-8+etch4_powerpc.deb
http://security.debian.org/pool/updates/main/p/php4/php4-ldap_4.4.4-8+etch4_powerpc.deb
http://security.debian.org/pool/updates/main/p/php4/php4-mcal_4.4.4-8+etch4_powerpc.deb
http://security.debian.org/pool/updates/main/p/php4/php4-mcrypt_4.4.4-8+etch4_powerpc.deb
http://security.debian.org/pool/updates/main/p/php4/php4-mhash_4.4.4-8+etch4_powerpc.deb
http://security.debian.org/pool/updates/main/p/php4/php4-mysql_4.4.4-8+etch4_powerpc.deb
http://security.debian.org/pool/updates/main/p/php4/php4-odbc_4.4.4-8+etch4_powerpc.deb
http://security.debian.org/pool/updates/main/p/php4/php4-pgsql_4.4.4-8+etch4_powerpc.deb
http://security.debian.org/pool/updates/main/p/php4/php4-pspell_4.4.4-8+etch4_powerpc.deb
http://security.debian.org/pool/updates/main/p/php4/php4-recode_4.4.4-8+etch4_powerpc.deb
http://security.debian.org/pool/updates/main/p/php4/php4-snmp_4.4.4-8+etch4_powerpc.deb
http://security.debian.org/pool/updates/main/p/php4/php4-sybase_4.4.4-8+etch4_powerpc.deb
http://security.debian.org/pool/updates/main/p/php4/php4-xslt_4.4.4-8+etch4_powerpc.deb
IBM S/390:
http://security.debian.org/pool/updates/main/p/php4/libapache-mod-php4_4.4.4-8+etch4_s390.deb
http://security.debian.org/pool/updates/main/p/php4/libapache2-mod-php4_4.4.4-8+etch4_s390.deb
http://security.debian.org/pool/updates/main/p/php4/php4-cgi_4.4.4-8+etch4_s390.deb
http://security.debian.org/pool/updates/main/p/php4/php4-cli_4.4.4-8+etch4_s390.deb
http://security.debian.org/pool/updates/main/p/php4/php4-common_4.4.4-8+etch4_s390.deb
http://security.debian.org/pool/updates/main/p/php4/php4-curl_4.4.4-8+etch4_s390.deb
http://security.debian.org/pool/updates/main/p/php4/php4-dev_4.4.4-8+etch4_s390.deb
http://security.debian.org/pool/updates/main/p/php4/php4-domxml_4.4.4-8+etch4_s390.deb
http://security.debian.org/pool/updates/main/p/php4/php4-gd_4.4.4-8+etch4_s390.deb
http://security.debian.org/pool/updates/main/p/php4/php4-imap_4.4.4-8+etch4_s390.deb
http://security.debian.org/pool/updates/main/p/php4/php4-ldap_4.4.4-8+etch4_s390.deb
http://security.debian.org/pool/updates/main/p/php4/php4-mcal_4.4.4-8+etch4_s390.deb
http://security.debian.org/pool/updates/main/p/php4/php4-mcrypt_4.4.4-8+etch4_s390.deb
http://security.debian.org/pool/updates/main/p/php4/php4-mhash_4.4.4-8+etch4_s390.deb
http://security.debian.org/pool/updates/main/p/php4/php4-mysql_4.4.4-8+etch4_s390.deb
http://security.debian.org/pool/updates/main/p/php4/php4-odbc_4.4.4-8+etch4_s390.deb
http://security.debian.org/pool/updates/main/p/php4/php4-pgsql_4.4.4-8+etch4_s390.deb
http://security.debian.org/pool/updates/main/p/php4/php4-pspell_4.4.4-8+etch4_s390.deb
http://security.debian.org/pool/updates/main/p/php4/php4-recode_4.4.4-8+etch4_s390.deb
http://security.debian.org/pool/updates/main/p/php4/php4-snmp_4.4.4-8+etch4_s390.deb
http://security.debian.org/pool/updates/main/p/php4/php4-sybase_4.4.4-8+etch4_s390.deb
http://security.debian.org/pool/updates/main/p/php4/php4-xslt_4.4.4-8+etch4_s390.deb
Sun Sparc:
http://security.debian.org/pool/updates/main/p/php4/libapache-mod-php4_4.4.4-8+etch4_sparc.deb
http://security.debian.org/pool/updates/main/p/php4/libapache2-mod-php4_4.4.4-8+etch4_sparc.deb
http://security.debian.org/pool/updates/main/p/php4/php4-cgi_4.4.4-8+etch4_sparc.deb
http://security.debian.org/pool/updates/main/p/php4/php4-cli_4.4.4-8+etch4_sparc.deb
http://security.debian.org/pool/updates/main/p/php4/php4-common_4.4.4-8+etch4_sparc.deb
http://security.debian.org/pool/updates/main/p/php4/php4-curl_4.4.4-8+etch4_sparc.deb
http://security.debian.org/pool/updates/main/p/php4/php4-dev_4.4.4-8+etch4_sparc.deb
http://security.debian.org/pool/updates/main/p/php4/php4-domxml_4.4.4-8+etch4_sparc.deb
http://security.debian.org/pool/updates/main/p/php4/php4-gd_4.4.4-8+etch4_sparc.deb
http://security.debian.org/pool/updates/main/p/php4/php4-imap_4.4.4-8+etch4_sparc.deb
http://security.debian.org/pool/updates/main/p/php4/php4-ldap_4.4.4-8+etch4_sparc.deb
http://security.debian.org/pool/updates/main/p/php4/php4-mcal_4.4.4-8+etch4_sparc.deb
http://security.debian.org/pool/updates/main/p/php4/php4-mcrypt_4.4.4-8+etch4_sparc.deb
http://security.debian.org/pool/updates/main/p/php4/php4-mhash_4.4.4-8+etch4_sparc.deb
http://security.debian.org/pool/updates/main/p/php4/php4-mysql_4.4.4-8+etch4_sparc.deb
http://security.debian.org/pool/updates/main/p/php4/php4-odbc_4.4.4-8+etch4_sparc.deb
http://security.debian.org/pool/updates/main/p/php4/php4-pgsql_4.4.4-8+etch4_sparc.deb
http://security.debian.org/pool/updates/main/p/php4/php4-pspell_4.4.4-8+etch4_sparc.deb
http://security.debian.org/pool/updates/main/p/php4/php4-recode_4.4.4-8+etch4_sparc.deb
http://security.debian.org/pool/updates/main/p/php4/php4-snmp_4.4.4-8+etch4_sparc.deb
http://security.debian.org/pool/updates/main/p/php4/php4-sybase_4.4.4-8+etch4_sparc.deb
http://security.debian.org/pool/updates/main/p/php4/php4-xslt_4.4.4-8+etch4_sparc.deb

Les sommes MD5 des fichiers indiqués sont disponibles sur la page originale de l'alerte de sécurité.