-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.8 Date: Fri, 18 Mar 2011 18:34:11 -0600 Source: php5 Binary: php5 php5-common libapache2-mod-php5 libapache2-mod-php5filter php5-cgi php5-cli php5-dev php5-dbg php-pear php5-curl php5-gd php5-gmp php5-imap php5-interbase php5-ldap php5-mcrypt php5-mhash php5-mysql php5-odbc php5-pgsql php5-pspell php5-recode php5-snmp php5-sqlite php5-sybase php5-tidy php5-xmlrpc php5-xsl Architecture: amd64 Version: 5.2.6.dfsg.1-1+lenny10 Distribution: lenny-security Urgency: high Maintainer: amd64 Builddd Daemon (barber) Changed-By: Raphael Geissert Description: libapache2-mod-php5 - server-side, HTML-embedded scripting language (Apache 2 module) libapache2-mod-php5filter - server-side, HTML-embedded scripting language (apache 2 filter mo php-pear - PEAR - PHP Extension and Application Repository php5 - server-side, HTML-embedded scripting language (metapackage) php5-cgi - server-side, HTML-embedded scripting language (CGI binary) php5-cli - command-line interpreter for the php5 scripting language php5-common - Common files for packages built from the php5 source php5-curl - CURL module for php5 php5-dbg - Debug symbols for PHP5 php5-dev - Files for PHP5 module development php5-gd - GD module for php5 php5-gmp - GMP module for php5 php5-imap - IMAP module for php5 php5-interbase - interbase/firebird module for php5 php5-ldap - LDAP module for php5 php5-mcrypt - MCrypt module for php5 php5-mhash - MHASH module for php5 php5-mysql - MySQL module for php5 php5-odbc - ODBC module for php5 php5-pgsql - PostgreSQL module for php5 php5-pspell - pspell module for php5 php5-recode - recode module for php5 php5-snmp - SNMP module for php5 php5-sqlite - SQLite module for php5 php5-sybase - Sybase / MS SQL Server module for php5 php5-tidy - tidy module for php5 php5-xmlrpc - XML-RPC module for php5 php5-xsl - XSL module for php5 Changes: php5 (5.2.6.dfsg.1-1+lenny10) lenny-security; urgency=high . [ Ondřej Surý ] * Include upstream's fix for CVE-2010-1128: Weak seed for the Linear Congruential Generator (LCG) * Fix CVE-2010-3709: NULL pointer dereference in ZipArchive::getArchiveComment * Fix CVE-2010-3710: stack consumption when using the FILTER_VALIDATE_EMAIL filter * Fix CVE-2010-3870: incorrect handling of ill-formed subsequences in UTF-8 data * Fix CVE-2010-4150: Double free in imap_do_open * Fix a NULL pointer dereference in the zip extract method . [ Raphael Geissert ] * Include a test for CVE-2010-4645 * Fix CVE-2011-0441: arbitrary files removal via cronjob (Closes #618489) Checksums-Sha1: 9c034021944a95fd83a752214e82581ae98f86cc 369354 php5-common_5.2.6.dfsg.1-1+lenny10_amd64.deb d3a8aa6f938dc1a06812a5b7b3f0ec337e4e4cee 2616452 libapache2-mod-php5_5.2.6.dfsg.1-1+lenny10_amd64.deb ff4c0c23a96165dfc6e7fe5be53231c2d06dc888 2615046 libapache2-mod-php5filter_5.2.6.dfsg.1-1+lenny10_amd64.deb 64fda4116a13b00a17a265be52466aaa9d697088 5084960 php5-cgi_5.2.6.dfsg.1-1+lenny10_amd64.deb 3d4bb44eaedf64f22317647bbfe6276880139cee 2561836 php5-cli_5.2.6.dfsg.1-1+lenny10_amd64.deb ea3f1e6ef8078e8d5d9db4f12b4e9ba51ac03e37 366956 php5-dev_5.2.6.dfsg.1-1+lenny10_amd64.deb ba9635f7a172cd4da63ca45b7d7af1d4a424ec32 8301150 php5-dbg_5.2.6.dfsg.1-1+lenny10_amd64.deb 7d325cd0f738683df30530787ecf8d6a5d3e9bad 25236 php5-curl_5.2.6.dfsg.1-1+lenny10_amd64.deb eed5bf4aca28a503dc2c1c0453380161d2bf8a5a 37042 php5-gd_5.2.6.dfsg.1-1+lenny10_amd64.deb 34d44aaca5ea3d84a4b8d245429478e4060b8e4f 16506 php5-gmp_5.2.6.dfsg.1-1+lenny10_amd64.deb 63687076ea11af8db6107bbea20b7d4d36f9f9de 38098 php5-imap_5.2.6.dfsg.1-1+lenny10_amd64.deb c96008df865eba3626cccdd0ecbc81b0c094ad19 48456 php5-interbase_5.2.6.dfsg.1-1+lenny10_amd64.deb a6c1b110ccd3ed963c674407796b01580b0f7e56 20150 php5-ldap_5.2.6.dfsg.1-1+lenny10_amd64.deb f8615eeac6c77100fe4efcec9893483355e3d4ab 14184 php5-mcrypt_5.2.6.dfsg.1-1+lenny10_amd64.deb 6d8f8303ec869615ff4870fb7e09879fbe9abd58 5430 php5-mhash_5.2.6.dfsg.1-1+lenny10_amd64.deb 840c76e29e7f8eb5d8f959ab7162dd21a5051571 73812 php5-mysql_5.2.6.dfsg.1-1+lenny10_amd64.deb 5b30b61d16c302c111a3161424f1a5e680d22918 37878 php5-odbc_5.2.6.dfsg.1-1+lenny10_amd64.deb fdf406a102f30f75fadfeddd2dbd735c3c8c83b0 56902 php5-pgsql_5.2.6.dfsg.1-1+lenny10_amd64.deb e0945dbdb534aafc03f897c67827355db236aa16 9478 php5-pspell_5.2.6.dfsg.1-1+lenny10_amd64.deb 4d534504509054c7166c2f07008389371dced144 5100 php5-recode_5.2.6.dfsg.1-1+lenny10_amd64.deb 8920384d21420fcfee2892ee5c14407143b2d39c 12336 php5-snmp_5.2.6.dfsg.1-1+lenny10_amd64.deb 63f713b2288e626b4131b37403cb48b07131f7d8 39812 php5-sqlite_5.2.6.dfsg.1-1+lenny10_amd64.deb cd60702aa3b68ae4ef86bf9a2505a7df6a7feb60 28614 php5-sybase_5.2.6.dfsg.1-1+lenny10_amd64.deb 614039ce586925f8922b024686d70eaaa9eb3664 18128 php5-tidy_5.2.6.dfsg.1-1+lenny10_amd64.deb 5009e77fdbd59661eb1e7af6122fb0751afebde7 40940 php5-xmlrpc_5.2.6.dfsg.1-1+lenny10_amd64.deb 3bd4294699ac61fc92043ccb96ab37189829dd98 13934 php5-xsl_5.2.6.dfsg.1-1+lenny10_amd64.deb Checksums-Sha256: c8a54325bf9b509453bb004886e9fd8cc56d9cb3bfd672203568db98790fc83d 369354 php5-common_5.2.6.dfsg.1-1+lenny10_amd64.deb 179c855471e1a79601cf1aa13ff93af76f0f0f934b5ae11b00454dad3acd1e7f 2616452 libapache2-mod-php5_5.2.6.dfsg.1-1+lenny10_amd64.deb c9f0fbff1855097b6afd097c1358d8e0b5d87dc840609bfb133990e05cdf6e84 2615046 libapache2-mod-php5filter_5.2.6.dfsg.1-1+lenny10_amd64.deb 9498851b0a366b0ca7651d1d2a4293cbc41222e3fc3660d5e8aba4f7e46d8f96 5084960 php5-cgi_5.2.6.dfsg.1-1+lenny10_amd64.deb ae3cfff3ecb0ba372e81b2573da395e160543905eda4b92e6aada57bce7411ab 2561836 php5-cli_5.2.6.dfsg.1-1+lenny10_amd64.deb b252cb9cde004e6dd0506d00fb1261d61d7744387cb2d15a70201fabbe572f4b 366956 php5-dev_5.2.6.dfsg.1-1+lenny10_amd64.deb 524eb5730c2c70a0acabcbac573448bce85f83995f39961974118e4506338bcc 8301150 php5-dbg_5.2.6.dfsg.1-1+lenny10_amd64.deb fcf386e1bd8d06f9c3b03a83f05aeb14cb06831b435df6ad68e52279bc5ba198 25236 php5-curl_5.2.6.dfsg.1-1+lenny10_amd64.deb d73b6b145c04ccf5f3df55575607b8efc0a7262b40948a4809bfd2ba2daef37a 37042 php5-gd_5.2.6.dfsg.1-1+lenny10_amd64.deb 492810b4d98c525e0a4bfb2c8fdd2aeb21642539852caf1f58ed78daa1badc2c 16506 php5-gmp_5.2.6.dfsg.1-1+lenny10_amd64.deb 2d2dfc73a307e478785aea3ae858c67a485bcadeb3444832f5a7e1d731b961fb 38098 php5-imap_5.2.6.dfsg.1-1+lenny10_amd64.deb ee2796afe9dcf4448042a393262a2819e57a757dc02eb32037f720dbd4d530da 48456 php5-interbase_5.2.6.dfsg.1-1+lenny10_amd64.deb 23ff498c6b0fc7a295795441c01bca476c257b07e03628c51762d6cae807d017 20150 php5-ldap_5.2.6.dfsg.1-1+lenny10_amd64.deb f6d18dcf6faa1bf2372704cdb095cec70c967bccec0bc5515d8360c526a4c9f4 14184 php5-mcrypt_5.2.6.dfsg.1-1+lenny10_amd64.deb 5ae8ad96c0aed8ab317face7a2a16d6029207d35911ce3d8ef34e50c4f8b9112 5430 php5-mhash_5.2.6.dfsg.1-1+lenny10_amd64.deb d480262f4c2de7c44dc8c31cee87a06c0eb4b58ea86cdfc393d6b9097599d4d6 73812 php5-mysql_5.2.6.dfsg.1-1+lenny10_amd64.deb e8eaa6e7f768e92bd0ead620a9b0a47825f73f4fbc88c751595f7a9539856dd5 37878 php5-odbc_5.2.6.dfsg.1-1+lenny10_amd64.deb 42338a15a551936c3b05abab0046a95b9cd11e747144a91703eae649b34a0be4 56902 php5-pgsql_5.2.6.dfsg.1-1+lenny10_amd64.deb deb1145a7082a5aae8500a46ad34b3b61c264741f788e55cb2e3bd15b067ce41 9478 php5-pspell_5.2.6.dfsg.1-1+lenny10_amd64.deb 3b62c6a79180e0c3a8d33d9f141fc280768ad771548864da8a580391760d5701 5100 php5-recode_5.2.6.dfsg.1-1+lenny10_amd64.deb d980e101925b0e25fe13a5f8917c312bd058bf07d67e9e220e681a8d3a4d33e7 12336 php5-snmp_5.2.6.dfsg.1-1+lenny10_amd64.deb e9399ba452eb9a65e1a12cc6ae8a96babc4a3735d9c2579e55b24612a5bb7b71 39812 php5-sqlite_5.2.6.dfsg.1-1+lenny10_amd64.deb 942e0ca0447ca6f1a2095f29699cacedad689ac479889636ffbab09cbf7a1294 28614 php5-sybase_5.2.6.dfsg.1-1+lenny10_amd64.deb 19f320a3b89efe2b34d5414ff0c370962b8469b6c163af2ebafdfeff77d838a2 18128 php5-tidy_5.2.6.dfsg.1-1+lenny10_amd64.deb 78e7e29d76577686c7335934f64e49b2f26b156f5c6582778c23e7cdd77e931d 40940 php5-xmlrpc_5.2.6.dfsg.1-1+lenny10_amd64.deb 087188891f3ae5d9936fb2397c32b5ca607182c14c146212c1ef99b1a875e557 13934 php5-xsl_5.2.6.dfsg.1-1+lenny10_amd64.deb Files: 5fb196270dc39e7b65a4358d96467ac7 369354 web optional php5-common_5.2.6.dfsg.1-1+lenny10_amd64.deb f9954d4d647b334010c5d605336f8067 2616452 web optional libapache2-mod-php5_5.2.6.dfsg.1-1+lenny10_amd64.deb 80fedfdbb828af184d31b80c1b94629d 2615046 web optional libapache2-mod-php5filter_5.2.6.dfsg.1-1+lenny10_amd64.deb 74e0a335f110a14c4d91efa81e92b4b6 5084960 web optional php5-cgi_5.2.6.dfsg.1-1+lenny10_amd64.deb 808a193b6095d481f6620782b2cd4ee9 2561836 web optional php5-cli_5.2.6.dfsg.1-1+lenny10_amd64.deb 86b917e18f886cd06244ec93e6ac4e0f 366956 devel optional php5-dev_5.2.6.dfsg.1-1+lenny10_amd64.deb 0e4b1fbf394ebdb5bf73b94dba87b138 8301150 devel extra php5-dbg_5.2.6.dfsg.1-1+lenny10_amd64.deb 7d7a68bd965c4f68bebb9e1c12edb7c2 25236 web optional php5-curl_5.2.6.dfsg.1-1+lenny10_amd64.deb 11eba75082a85679e993e2c424c0ccee 37042 web optional php5-gd_5.2.6.dfsg.1-1+lenny10_amd64.deb 2b595d1c2b6a2e43549f2ac81366d09f 16506 web optional php5-gmp_5.2.6.dfsg.1-1+lenny10_amd64.deb d8dde1e87c57d0edc61e28a48f25ea34 38098 web optional php5-imap_5.2.6.dfsg.1-1+lenny10_amd64.deb cb677aa436a37d5654072a58b33a1062 48456 web optional php5-interbase_5.2.6.dfsg.1-1+lenny10_amd64.deb 35f819ef159e4a71dbbf1c8a0c00f32d 20150 web optional php5-ldap_5.2.6.dfsg.1-1+lenny10_amd64.deb a7b9c3a06204fc4ea46191566c0435c3 14184 web optional php5-mcrypt_5.2.6.dfsg.1-1+lenny10_amd64.deb 1b62d65a02da1a65a4a1645b96cc4d00 5430 web optional php5-mhash_5.2.6.dfsg.1-1+lenny10_amd64.deb f36b4c9ffa709a4c8f68f4433448c508 73812 web optional php5-mysql_5.2.6.dfsg.1-1+lenny10_amd64.deb 200e16094dda9f83a90d1e81377bf0cb 37878 web optional php5-odbc_5.2.6.dfsg.1-1+lenny10_amd64.deb c6175dfcec56ff0a75c1a067d62484a2 56902 web optional php5-pgsql_5.2.6.dfsg.1-1+lenny10_amd64.deb a7968c5bc69744a716b74758ec1c9d85 9478 web optional php5-pspell_5.2.6.dfsg.1-1+lenny10_amd64.deb 8bb9eddb9cdaa3c45e8bddd488319471 5100 web optional php5-recode_5.2.6.dfsg.1-1+lenny10_amd64.deb 9dacb5de613d516bc4b9bd3390a1635b 12336 web optional php5-snmp_5.2.6.dfsg.1-1+lenny10_amd64.deb 173dd9b839c79d2378b1fe1f64cb8770 39812 web optional php5-sqlite_5.2.6.dfsg.1-1+lenny10_amd64.deb a5fcad224f26a07e1b487f917962019c 28614 web optional php5-sybase_5.2.6.dfsg.1-1+lenny10_amd64.deb 7d70efe1838eaee38e984ddcd4c88aa0 18128 web optional php5-tidy_5.2.6.dfsg.1-1+lenny10_amd64.deb b8671aa74a6ed7e652182123119ba6a1 40940 web optional php5-xmlrpc_5.2.6.dfsg.1-1+lenny10_amd64.deb da886c9314b80be0f1e63e5c277b0661 13934 web optional php5-xsl_5.2.6.dfsg.1-1+lenny10_amd64.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) iEYEARECAAYFAk2E6oIACgkQYy49rUbZzlq7kQCfYb9OtUbuAAJQT2CuYhPvgSvB 9iEAn0bXJ5yLkJZ9sKdIU9oJa/9iwp1w =eR5L -----END PGP SIGNATURE-----