-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.6
Date: Thu, 12 Sep 2002 17:37:54 -0400
Source: php4
Binary: php4-cgi-snmp php4-cgi-mysql php4-snmp php4-mysql php4-dev php4-cgi-pgsql php4-cgi-imap php4-pgsql php4-imap php4-cgi-xml php4-cgi-mhash php4-cgi-ldap php4-xml php4-mhash php4-ldap php4-cgi-gd php4-cgi php4-gd php4
Architecture: source i386 all
Version: 4.0.3pl1-0potato4
Distribution: oldstable-security
Urgency: high
Maintainer: Matt Zimmerman <mdz@debian.org>
Description: 
 php4       - A server-side, HTML-embedded scripting language
 php4-cgi   - A server-side, HTML-embedded scripting language
 php4-cgi-gd - GD module for php4-cgi
 php4-cgi-imap - IMAP module for php4-cgi
 php4-cgi-ldap - LDAP module for php4-cgi
 php4-cgi-mhash - MHASH module for php4-cgi
 php4-cgi-mysql - MySQL module for php4-cgi
 php4-cgi-pgsql - PostgreSQL module for php4-cgi
 php4-cgi-snmp - SNMP module for php4-cgi
 php4-cgi-xml - XML module for php4-cgi
 php4-dev   - Files for PHP4 module development
 php4-gd    - GD module for php4
 php4-imap  - IMAP module for php4
 php4-ldap  - LDAP module for php4
 php4-mhash - MHASH module for php4
 php4-mysql - MySQL module for php4
 php4-pgsql - PostgreSQL module for php4
 php4-snmp  - SNMP module for php4
 php4-xml   - XML module for php4
Changes: 
 php4 (4.0.3pl1-0potato4) oldstable-security; urgency=high
 .
    * Non-maintainer upload by Security Team
    * Backport security fixes from 4.2.3+ to prevent CR/LF injection
      - Filter control characters from To and Subject in mail()
      - Filter control characters from URLs passed to fopen()
    * Was never vulnerable to safe_mode/extra_cmd problem in mail()
      because extra_cmd doesn't exist yet in this version
Files: 
 e9b5dbf3554c63dd654e69c83da63a97 1125 web optional php4_4.0.3pl1-0potato4.dsc
 9a862082a0b60f6e2f0fa9c993d3ff19 134587 web optional php4_4.0.3pl1-0potato4.diff.gz
 37751e39ac9688d17965cf947ed7f6fc 412254 web optional php4_4.0.3pl1-0potato4_i386.deb
 479f6fb8b14e859ab6254fbd64413d88 24520 web optional php4-gd_4.0.3pl1-0potato4_i386.deb
 2a29c0b98a104ba4265af89f82edd89b 26256 web optional php4-imap_4.0.3pl1-0potato4_i386.deb
 981140715b7fc6ea46722477140307ab 11362 web optional php4-ldap_4.0.3pl1-0potato4_i386.deb
 c64854bc71948275328fecf6280e11d1 4462 web optional php4-mhash_4.0.3pl1-0potato4_i386.deb
 7025cebba6f9aec65186174c188030fb 13254 web optional php4-mysql_4.0.3pl1-0potato4_i386.deb
 61dd73122bb790445955e6934b0d8422 14022 web optional php4-pgsql_4.0.3pl1-0potato4_i386.deb
 60bb511b76036cef644d9acadd236761 6356 web optional php4-snmp_4.0.3pl1-0potato4_i386.deb
 e2c848d496af7d8da9d300cee18fd635 11902 web optional php4-xml_4.0.3pl1-0potato4_i386.deb
 b1dfc5587ea2719ff5a789fc02bc27ec 635076 web optional php4-cgi_4.0.3pl1-0potato4_i386.deb
 50a613ef374e632f23ffb52be6f74fb5 24516 web optional php4-cgi-gd_4.0.3pl1-0potato4_i386.deb
 454001e92c3b3431b9235359e6b8e7f5 26260 web optional php4-cgi-imap_4.0.3pl1-0potato4_i386.deb
 df488e1e3ecdd791878dfa62c4e7f7da 11370 web optional php4-cgi-ldap_4.0.3pl1-0potato4_i386.deb
 2627564c26e0157799567adfbdaab719 4464 web optional php4-cgi-mhash_4.0.3pl1-0potato4_i386.deb
 39937a25b68132e0479726e2d8c2780d 13252 web optional php4-cgi-mysql_4.0.3pl1-0potato4_i386.deb
 bb2bb3b8b17cf6790f6e8fa4ade4a9a6 14028 web optional php4-cgi-pgsql_4.0.3pl1-0potato4_i386.deb
 98cd7c16f392696bdcf80d7616305d23 6354 web optional php4-cgi-snmp_4.0.3pl1-0potato4_i386.deb
 dbc115be2f70bf0d8b49bf8bde293408 11902 web optional php4-cgi-xml_4.0.3pl1-0potato4_i386.deb
 7130b3fe0db1abb652777b642e88fed8 183840 web optional php4-dev_4.0.3pl1-0potato4_all.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.7 (GNU/Linux)

iD8DBQE9gShCArxCt0PiXR4RAvlqAKDFByXBdHF/bW9zrtDUXjfYTcYo2wCgmsbV
3xmepJD90NiEOZjo32HmWgE=
=vwk8
-----END PGP SIGNATURE-----