-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.8 Date: Fri, 18 Mar 2011 18:34:11 -0600 Source: php5 Binary: php5 php5-common libapache2-mod-php5 libapache2-mod-php5filter php5-cgi php5-cli php5-dev php5-dbg php-pear php5-curl php5-gd php5-gmp php5-imap php5-interbase php5-ldap php5-mcrypt php5-mhash php5-mysql php5-odbc php5-pgsql php5-pspell php5-recode php5-snmp php5-sqlite php5-sybase php5-tidy php5-xmlrpc php5-xsl Architecture: ia64 Version: 5.2.6.dfsg.1-1+lenny10 Distribution: lenny-security Urgency: high Maintainer: ia64 Build Daemon (caballero) Changed-By: Raphael Geissert Description: libapache2-mod-php5 - server-side, HTML-embedded scripting language (Apache 2 module) libapache2-mod-php5filter - server-side, HTML-embedded scripting language (apache 2 filter mo php-pear - PEAR - PHP Extension and Application Repository php5 - server-side, HTML-embedded scripting language (metapackage) php5-cgi - server-side, HTML-embedded scripting language (CGI binary) php5-cli - command-line interpreter for the php5 scripting language php5-common - Common files for packages built from the php5 source php5-curl - CURL module for php5 php5-dbg - Debug symbols for PHP5 php5-dev - Files for PHP5 module development php5-gd - GD module for php5 php5-gmp - GMP module for php5 php5-imap - IMAP module for php5 php5-interbase - interbase/firebird module for php5 php5-ldap - LDAP module for php5 php5-mcrypt - MCrypt module for php5 php5-mhash - MHASH module for php5 php5-mysql - MySQL module for php5 php5-odbc - ODBC module for php5 php5-pgsql - PostgreSQL module for php5 php5-pspell - pspell module for php5 php5-recode - recode module for php5 php5-snmp - SNMP module for php5 php5-sqlite - SQLite module for php5 php5-sybase - Sybase / MS SQL Server module for php5 php5-tidy - tidy module for php5 php5-xmlrpc - XML-RPC module for php5 php5-xsl - XSL module for php5 Changes: php5 (5.2.6.dfsg.1-1+lenny10) lenny-security; urgency=high . [ Ondřej Surý ] * Include upstream's fix for CVE-2010-1128: Weak seed for the Linear Congruential Generator (LCG) * Fix CVE-2010-3709: NULL pointer dereference in ZipArchive::getArchiveComment * Fix CVE-2010-3710: stack consumption when using the FILTER_VALIDATE_EMAIL filter * Fix CVE-2010-3870: incorrect handling of ill-formed subsequences in UTF-8 data * Fix CVE-2010-4150: Double free in imap_do_open * Fix a NULL pointer dereference in the zip extract method . [ Raphael Geissert ] * Include a test for CVE-2010-4645 * Fix CVE-2011-0441: arbitrary files removal via cronjob (Closes #618489) Checksums-Sha1: 01fbd7f781c789d605bf68413f5709fdf106c4e3 385260 php5-common_5.2.6.dfsg.1-1+lenny10_ia64.deb 55ac5e140bc932f04ee6d6ba7c2782499bef2808 3381830 libapache2-mod-php5_5.2.6.dfsg.1-1+lenny10_ia64.deb b76fdac5f1a237c1eef5770c9f1225284d1363ba 3379680 libapache2-mod-php5filter_5.2.6.dfsg.1-1+lenny10_ia64.deb a2b8d7d8eee3ce99fa13051ce2528e77393a4639 6615022 php5-cgi_5.2.6.dfsg.1-1+lenny10_ia64.deb 0b0bad679adda6bdc4bb589692a48fa52a087d8c 3325798 php5-cli_5.2.6.dfsg.1-1+lenny10_ia64.deb 89e11b9e11300f049d34bb0976b6b0d8d5f8c61c 362768 php5-dev_5.2.6.dfsg.1-1+lenny10_ia64.deb 4cb4ab90354a267876ed1a359c70dfaa8a6d5ea3 17631346 php5-dbg_5.2.6.dfsg.1-1+lenny10_ia64.deb ec656a6d65ddb55fce6823fc17ffaf8464c4e451 34384 php5-curl_5.2.6.dfsg.1-1+lenny10_ia64.deb 6390a9291322b060cf1379c5705615181b94e7d4 50644 php5-gd_5.2.6.dfsg.1-1+lenny10_ia64.deb 780a8e1081deb591697399e0d93a22f84b8a9e85 20532 php5-gmp_5.2.6.dfsg.1-1+lenny10_ia64.deb bae57213b1cc38b9a03568b619bbcefab9f15b15 50870 php5-imap_5.2.6.dfsg.1-1+lenny10_ia64.deb 840c010bdc097c0996a1149605710203434f38ae 26676 php5-ldap_5.2.6.dfsg.1-1+lenny10_ia64.deb 9ff8d2b258a1c63d7b3a40267c72a8c292579815 18188 php5-mcrypt_5.2.6.dfsg.1-1+lenny10_ia64.deb 6517eef4299de9304e02c6f3fe3daf78823583b9 6542 php5-mhash_5.2.6.dfsg.1-1+lenny10_ia64.deb f13ea21aefd2ae35f470e028bf2fc13d747a36e9 97438 php5-mysql_5.2.6.dfsg.1-1+lenny10_ia64.deb 6ca38319a1c15a5850095ddc32765aed44a8efab 51832 php5-odbc_5.2.6.dfsg.1-1+lenny10_ia64.deb 4cd221e2944391e56d5dbe56015132ca85236ae7 80512 php5-pgsql_5.2.6.dfsg.1-1+lenny10_ia64.deb a0d3d6ef5638b80d2163562f23587d8d5c5e1d38 11950 php5-pspell_5.2.6.dfsg.1-1+lenny10_ia64.deb 4dd92e371d867055372cda9792329dfae99291e1 6230 php5-recode_5.2.6.dfsg.1-1+lenny10_ia64.deb 921ef2799e4ddf21e8af616edd83dea6d3e76ab8 15844 php5-snmp_5.2.6.dfsg.1-1+lenny10_ia64.deb f7c9354b780dc1f84aa639bbbf682b8845a7e1ac 54982 php5-sqlite_5.2.6.dfsg.1-1+lenny10_ia64.deb fe5dfdd8f8250011c92390af4267fdd2703f95ec 38742 php5-sybase_5.2.6.dfsg.1-1+lenny10_ia64.deb 4cf4bdf77acf541677185aaad3d4d8241667c6e6 24684 php5-tidy_5.2.6.dfsg.1-1+lenny10_ia64.deb 7feb8788882301b6801c707806263086654ca4cd 54686 php5-xmlrpc_5.2.6.dfsg.1-1+lenny10_ia64.deb 22e1c24069e06f8a3d522b87f1bdc62d89fd7525 18600 php5-xsl_5.2.6.dfsg.1-1+lenny10_ia64.deb Checksums-Sha256: ebf2c941fa7e9fd04895510d00abd16ffc8c5a6bdf83bd811bcd57bcd6b8751e 385260 php5-common_5.2.6.dfsg.1-1+lenny10_ia64.deb 911c0880fe45e839bc22d129f971457119f0af500e941086bd72b4f5436a2ed8 3381830 libapache2-mod-php5_5.2.6.dfsg.1-1+lenny10_ia64.deb a68c2c0cd33236a2f62cf6875def1c127e19e9bfe446deebe8b545883c604445 3379680 libapache2-mod-php5filter_5.2.6.dfsg.1-1+lenny10_ia64.deb bf277a6a13dc7249ba9aa5fd81fd5b7ea007e5489e32cb60628cf7dc470e4712 6615022 php5-cgi_5.2.6.dfsg.1-1+lenny10_ia64.deb 47106e4dffa87b235b231893000755b057e9b9586edc0c7acb380f9f288ca886 3325798 php5-cli_5.2.6.dfsg.1-1+lenny10_ia64.deb 69d971d3fb1b34551f84d62141b95555fae77b8b73f5ef76f85ce42a24c437a8 362768 php5-dev_5.2.6.dfsg.1-1+lenny10_ia64.deb dbd405488436c350bbe079a3bac2f7b9eef586a974aeb87407ac2b3224936422 17631346 php5-dbg_5.2.6.dfsg.1-1+lenny10_ia64.deb 19813256c875714df8787c1e46507c6168d73dfec644fc41bcd67c888eab5585 34384 php5-curl_5.2.6.dfsg.1-1+lenny10_ia64.deb 6a3145b253047d9074a43ee0e66a43de036984c2173a742b602d2b39fb0ff51a 50644 php5-gd_5.2.6.dfsg.1-1+lenny10_ia64.deb ea54c5e6ecf2c366f3dab71eaeb91c44b65940111ae91c9443819d79d2449202 20532 php5-gmp_5.2.6.dfsg.1-1+lenny10_ia64.deb 9e614b6454d70d0e04a282bd28a60309fd73de9fb0785b00fc531a01f43efac0 50870 php5-imap_5.2.6.dfsg.1-1+lenny10_ia64.deb 35a713b7416982b750453166405ebfea242b5179edc7c56dbe20dbb1e5c4372b 26676 php5-ldap_5.2.6.dfsg.1-1+lenny10_ia64.deb 7c98f0846188b8524e20f9e2c79a5947120de33cd1ca404047d572dd488de418 18188 php5-mcrypt_5.2.6.dfsg.1-1+lenny10_ia64.deb 6dc5425f4bfe178294c07674548bb2b1e41eaa137c224766d10f6f4a82043377 6542 php5-mhash_5.2.6.dfsg.1-1+lenny10_ia64.deb 064c5f6583b63b44c90033c3f2e1b96ac9f838d42a08dc16a8b74d2a181193f9 97438 php5-mysql_5.2.6.dfsg.1-1+lenny10_ia64.deb 6c85a9adcee6be68dc0f1a6641cd26bd7b819b3232e30acd26b4dd95c8712bd3 51832 php5-odbc_5.2.6.dfsg.1-1+lenny10_ia64.deb 1e1dbfe3796f2a852f5a701a2bf80b64ad4357ef58748ae1d92d0a5c4e024040 80512 php5-pgsql_5.2.6.dfsg.1-1+lenny10_ia64.deb c76e92652ddd36f6d0cf986f935a8213bec9ef4bbff3640da809ede45879f7ba 11950 php5-pspell_5.2.6.dfsg.1-1+lenny10_ia64.deb cc4919bec719af441808b47330bbc6887f8c52116f19aae3cfa88664ec41c7d6 6230 php5-recode_5.2.6.dfsg.1-1+lenny10_ia64.deb d74c166e7583dbdcf8c4edc05dfb12067161d0df8dc6dd2c4ae849d172a1bda5 15844 php5-snmp_5.2.6.dfsg.1-1+lenny10_ia64.deb 50abc7a3d38bba51855428d4817ab87f99198d8e42be510242338e71713dcf51 54982 php5-sqlite_5.2.6.dfsg.1-1+lenny10_ia64.deb df0615353ccd08889cf79366526023193b4280b5372d3ecea7989b590745f3a6 38742 php5-sybase_5.2.6.dfsg.1-1+lenny10_ia64.deb 033ee46a7e856bc49b8dc46639e831530c078b8e91f1f8b4c72c40db126959da 24684 php5-tidy_5.2.6.dfsg.1-1+lenny10_ia64.deb ab75175b2a2c3b8194af618cd2d5b1cc04e0d2361d4459f95ff0944a081f8811 54686 php5-xmlrpc_5.2.6.dfsg.1-1+lenny10_ia64.deb c8e366a7e21702f058652e768547ee47fcd41873b96d5205d308d37f176e53f9 18600 php5-xsl_5.2.6.dfsg.1-1+lenny10_ia64.deb Files: 3d91061bf9e4a30f0f9389668e759b08 385260 web optional php5-common_5.2.6.dfsg.1-1+lenny10_ia64.deb 7a444294ed74d74b237e8bdd9297567c 3381830 web optional libapache2-mod-php5_5.2.6.dfsg.1-1+lenny10_ia64.deb a6d452c8b7519106b737b3b614796079 3379680 web optional libapache2-mod-php5filter_5.2.6.dfsg.1-1+lenny10_ia64.deb 3d632fc195975c69f6f07d928e1edbfc 6615022 web optional php5-cgi_5.2.6.dfsg.1-1+lenny10_ia64.deb f5d509a8506a5c07c73d187956897271 3325798 web optional php5-cli_5.2.6.dfsg.1-1+lenny10_ia64.deb d828bfa90f253c50b7bfda2c6fed9285 362768 devel optional php5-dev_5.2.6.dfsg.1-1+lenny10_ia64.deb d081c7a02a7b804bd40efe0bec875393 17631346 devel extra php5-dbg_5.2.6.dfsg.1-1+lenny10_ia64.deb 9d2fbb7afbc519146d707e0495dc362e 34384 web optional php5-curl_5.2.6.dfsg.1-1+lenny10_ia64.deb 4b49612afeaddb599156c4be744f8535 50644 web optional php5-gd_5.2.6.dfsg.1-1+lenny10_ia64.deb 91b6e2c1978f752d8acb133507c91f0b 20532 web optional php5-gmp_5.2.6.dfsg.1-1+lenny10_ia64.deb 1469d26417108cf02176ff9d738d4282 50870 web optional php5-imap_5.2.6.dfsg.1-1+lenny10_ia64.deb ec1f9add1d8588b2213af9ef6f8aab8d 26676 web optional php5-ldap_5.2.6.dfsg.1-1+lenny10_ia64.deb efb40cdef1e528b436283b3f6872776a 18188 web optional php5-mcrypt_5.2.6.dfsg.1-1+lenny10_ia64.deb baca144fa0b3a323d05f48aa07ad5cb4 6542 web optional php5-mhash_5.2.6.dfsg.1-1+lenny10_ia64.deb 027662c2985d5c1aeaa3d19bb7f2eca2 97438 web optional php5-mysql_5.2.6.dfsg.1-1+lenny10_ia64.deb 55b20af2e2e039892ef2e1c67e74c738 51832 web optional php5-odbc_5.2.6.dfsg.1-1+lenny10_ia64.deb a62bfa6ad7610044ce3ff22fd0ccbab4 80512 web optional php5-pgsql_5.2.6.dfsg.1-1+lenny10_ia64.deb 2aa93dd6fcf57d0ecb860c21c6298d07 11950 web optional php5-pspell_5.2.6.dfsg.1-1+lenny10_ia64.deb 11eca327c2d1e70c8bba9fb93db9463c 6230 web optional php5-recode_5.2.6.dfsg.1-1+lenny10_ia64.deb da772c044ed81197d83921aa88178dcf 15844 web optional php5-snmp_5.2.6.dfsg.1-1+lenny10_ia64.deb 98e9893de22b06cccf2f62940a982d3c 54982 web optional php5-sqlite_5.2.6.dfsg.1-1+lenny10_ia64.deb acbebe0336338f9a4e9668256a46f515 38742 web optional php5-sybase_5.2.6.dfsg.1-1+lenny10_ia64.deb e652d8ce42bc07ed8e0e41fd4ce8eee5 24684 web optional php5-tidy_5.2.6.dfsg.1-1+lenny10_ia64.deb 8766fc72f17995753de15815f5d5344c 54686 web optional php5-xmlrpc_5.2.6.dfsg.1-1+lenny10_ia64.deb d6c569da8e2d8d423a63fe8c54442866 18600 web optional php5-xsl_5.2.6.dfsg.1-1+lenny10_ia64.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) iEYEARECAAYFAk2E6owACgkQYy49rUbZzlqrOQCfY1+qmY8jSSSKcea+LdU/JLG6 6ykAnjcFIfmubN8vnAU2skYkgvpTup1k =Bmgk -----END PGP SIGNATURE-----