-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

 --------------------------------------------------------------------------
   Turbolinux Security Advisory TLSA-2006-17
   http://www.turbolinux.co.jp/security/
                                             security-team@turbolinux.co.jp
 --------------------------------------------------------------------------

 Original released date: 28 Jul 2006
 Last revised: 28 Jul 2006

 Package: php

 Summary: Multiple vulnerabilities in php

 More information:
    PHP is an HTML-embedded scripting language.
    The multiple vulnerabilities exist in php.

 Impact:
    The vulnerabilities may allow remote attackers to bypass access control
 rules.

 Affected Products:
    - Turbolinux Appliance Server 2.0
    - Turbolinux 10 Server x64 Edition
    - Turbolinux Appliance Server 1.0 Hosting Edition
    - Turbolinux Appliance Server 1.0 Workgroup Edition
    - Turbolinux 10 Server
    - Turbolinux Home
    - Turbolinux 10 F...
    - Turbolinux 10 Desktop
    - Turbolinux Multimedia
    - Turbolinux Personal
    - Turbolinux 8 Server
    - Turbolinux 8 Workstation
    - Turbolinux 7 Server


 <Turbolinux Appliance Server 2.0>

   Source Packages
   Size: MD5

   php4-4.3.11-3.src.rpm
     12336841 9c460d33895e12ca481aa196a970b374

   Binary Packages
   Size: MD5

   php4-4.3.11-3.i586.rpm
      5230888 bf3cab9c6ffa08f63e09f68b35eae978
   php4-gd-4.3.11-3.i586.rpm
        46589 291113b4cd2e15dfe8b5b225296e40d2
   php4-imap-4.3.11-3.i586.rpm
        11980 6fe2a5357d509c36c67d5df0958b472d
   php4-ldap-4.3.11-3.i586.rpm
        35391 2342e6ad076e1e7fab1569e1f86dc3d1
   php4-manual-4.3.11-3.i586.rpm
      7503569 c19ea10b6b7ca2106795a8fa9ea1e794
   php4-ming-4.3.11-3.i586.rpm
        46733 f7a285b0b3419dd95d05c2888f6c2de5
   php4-mysql-4.3.11-3.i586.rpm
       111706 659287c4fd5c4034e1a74e7e279c2165
   php4-pgsql-4.3.11-3.i586.rpm
        63377 17ff761f9761986314ea1e919a57140f

 <Turbolinux 10 Server x64 Edition> 

   Source Packages
   Size: MD5

   php4-4.3.9-11.src.rpm
     12359915 4fa8ce8711b9bc6a3f04f4663e1e714f

   Binary Packages
   Size: MD5

   php4-4.3.9-11.x86_64.rpm
      5474447 6a545dac375fe99f7978a8cb3ab641da
   php4-debug-4.3.9-11.x86_64.rpm
      6574548 d83ba497330cbb4eee6a744a65331ffb
   php4-gd-4.3.9-11.x86_64.rpm
        50479 a348c2926165146a73ce8dd6457752aa
   php4-imap-4.3.9-11.x86_64.rpm
        10794 b539424772afa9f2a3820a7c34dca6f1
   php4-ldap-4.3.9-11.x86_64.rpm
        38649 8f8b33ba61cbffae8fd90f095eac7dca
   php4-manual-4.3.9-11.x86_64.rpm
      7502053 72458b11278af35f6088828af25ac5cc
   php4-ming-4.3.9-11.x86_64.rpm
        50747 b2dded4112cf7abc515fc74bf2d82b90
   php4-mysql-4.3.9-11.x86_64.rpm
       134038 533642554b7b8d10c4fa61fd698ccd0e
   php4-pgsql-4.3.9-11.x86_64.rpm
        75666 22cfedc90b53479de614bc5da3789cde

 <Turbolinux Appliance Server 1.0 Hosting Edition>

   Source Packages
   Size: MD5

   php-4.2.3-29.src.rpm
      3603631 67bc54bd578b9fbb6b622f6850b08d53

   Binary Packages
   Size: MD5

   php-4.2.3-29.i586.rpm
      1632737 cd511cfc59c51b1cc1939f797d4cd996
   php-gd-4.2.3-29.i586.rpm
        31839 bca1a540d4c105eb37383cc04cad1df7
   php-imap-4.2.3-29.i586.rpm
         9672 21ec92d199557fcb7ddd71a62e5f028e
   php-ldap-4.2.3-29.i586.rpm
        25144 b83be1acfd210c29ac4c0e4ab776a36c
   php-manual-4.2.3-29.i586.rpm
       342185 30d727a990b05bb848eb1aa8bd778f35
   php-ming-4.2.3-29.i586.rpm
        33719 9d243a50ce5e39344725034d48867b8a
   php-mysql-4.2.3-29.i586.rpm
        91307 bd5bda2c38ad33b3f02279735e0c620d
   php-pgsql-4.2.3-29.i586.rpm
        35938 d018153958e6439f7f38d1cd10dab65e

 <Turbolinux Appliance Server 1.0 Workgroup Edition>

   Source Packages
   Size: MD5

   php-4.2.3-29.src.rpm
      3603631 a923789f70eb4cf3c70a94ccc277cb35

   Binary Packages
   Size: MD5

   php-4.2.3-29.i586.rpm
      1632858 3efc31f08ddc60f2c3bf5a3126c0ef59
   php-gd-4.2.3-29.i586.rpm
        31992 8d2f39ed8c4112ca101b46486fe211b0
   php-imap-4.2.3-29.i586.rpm
         9816 51c25855286b3261bdf9734314e337a0
   php-ldap-4.2.3-29.i586.rpm
        25266 9e5e113a8819c0fcf2d783e7734580ed
   php-manual-4.2.3-29.i586.rpm
       342315 cddd87dd3caf92a416c219420786e537
   php-ming-4.2.3-29.i586.rpm
        33886 4f42b320ac3828a6f523fe3e03e71cfe
   php-mysql-4.2.3-29.i586.rpm
        91462 5b088007bb5b5326dff3d074a1b8875f
   php-pgsql-4.2.3-29.i586.rpm
        36126 fc118e104b0c5739bdfbeb9e08c45ba6

 <Turbolinux 10 Server>

   Source Packages
   Size: MD5

   php4-4.3.11-3.src.rpm
     12336841 9c460d33895e12ca481aa196a970b374

   Binary Packages
   Size: MD5

   php4-4.3.11-3.i586.rpm
      5230888 bf3cab9c6ffa08f63e09f68b35eae978
   php4-debug-4.3.11-3.i586.rpm
      6439609 099c2c47413ce8a2374dffa9ec3d5628
   php4-gd-4.3.11-3.i586.rpm
        46589 291113b4cd2e15dfe8b5b225296e40d2
   php4-imap-4.3.11-3.i586.rpm
        11980 6fe2a5357d509c36c67d5df0958b472d
   php4-ldap-4.3.11-3.i586.rpm
        35391 2342e6ad076e1e7fab1569e1f86dc3d1
   php4-manual-4.3.11-3.i586.rpm
      7503569 c19ea10b6b7ca2106795a8fa9ea1e794
   php4-ming-4.3.11-3.i586.rpm
        46733 f7a285b0b3419dd95d05c2888f6c2de5
   php4-mysql-4.3.11-3.i586.rpm
       111706 659287c4fd5c4034e1a74e7e279c2165
   php4-pgsql-4.3.11-3.i586.rpm
        63377 17ff761f9761986314ea1e919a57140f

 <Turbolinux 10 Desktop, Turbolinux 10 F..., Turbolinux Home, Turbolinux
 Multimedia, Turbolinux Personal>

   Source Packages
   Size: MD5

   php4-4.3.3-17.src.rpm
      4187826 6931593638572ae521e6d740eeef6397

   Binary Packages
   Size: MD5

   php4-4.3.3-17.i586.rpm
      3406595 a6557b1f3191eb1510d6c5ec6ff6b7cd
   php4-gd-4.3.3-17.i586.rpm
        31336 12a39044912a36166b9ef4aa3951eb38
   php4-imap-4.3.3-17.i586.rpm
         9922 f5d4610918662191a6dc5be9c5cce135
   php4-ldap-4.3.3-17.i586.rpm
        24307 51188795dbc452d8227c44dd09dbf35c
   php4-manual-4.3.3-17.i586.rpm
       342432 f1113227fe0037eb5e8cd58c8eaaea07
   php4-ming-4.3.3-17.i586.rpm
        30791 75316c9527921de3b223106689a81e2c
   php4-mysql-4.3.3-17.i586.rpm
        81789 56d884c77f7de2171507db253f2d22ef
   php4-pgsql-4.3.3-17.i586.rpm
        48334 eec217f641a16452250ffbc8ff8594e8

 <Turbolinux 8 Server>

   Source Packages
   Size: MD5

   php-4.2.3-29.src.rpm
      3603631 d35925a71387dbf6cd9d1eabf47e3b51

   Binary Packages
   Size: MD5

   php-4.2.3-29.i586.rpm
      1632806 73760250254c6c8333bb5a6bf6814287
   php-gd-4.2.3-29.i586.rpm
        31917 9bad50c44209613afb595a0c090c0966
   php-imap-4.2.3-29.i586.rpm
         9777 f76c23c826bb04e40149919e05f41406
   php-ldap-4.2.3-29.i586.rpm
        25213 7e5a842289c5fee92b9539a5ed3452f5
   php-manual-4.2.3-29.i586.rpm
       342325 a65892f64fb57ef566f6a1652c292b35
   php-ming-4.2.3-29.i586.rpm
        33779 ffeda67ac24c6daef679ce2ac49b11b3
   php-mysql-4.2.3-29.i586.rpm
        91383 92cd18a0f5812ee829a3c4d1fdf8b244
   php-pgsql-4.2.3-29.i586.rpm
        36015 7da49e4f18dade0fb0f547d49a614096

 <Turbolinux 8 Workstation>

   Source Packages
   Size: MD5

   php-4.2.3-29.src.rpm
      3603631 3f976f53d6770dbe0e7272e38fe8df59

   Binary Packages
   Size: MD5

   php-4.2.3-29.i586.rpm
      1633684 c97d26597879aec361ca84cd135d4b2e
   php-gd-4.2.3-29.i586.rpm
        31944 f1e9ebe2046d88ca7e69fb9e82607b33
   php-imap-4.2.3-29.i586.rpm
         9778 e55b34e252316fd944c5346c67a9c4f4
   php-ldap-4.2.3-29.i586.rpm
        25222 d917e7007b8a1bee610ee67fd6956802
   php-manual-4.2.3-29.i586.rpm
       342296 04c5b224792c96ccb1f3db7b08be7daa
   php-ming-4.2.3-29.i586.rpm
        33783 be05a26735ace3221655248936bfd799
   php-mysql-4.2.3-29.i586.rpm
        91410 6e3037f7c4f31561fff186bdf89acc0d
   php-pgsql-4.2.3-29.i586.rpm
        36028 3ceeb6535bc45113d83e4c26032615e8

 <Turbolinux 7 Server>

   Source Packages
   Size: MD5

   php-4.2.3-29.src.rpm
      3603631 6f00952852416995968493991cab9dee

   Binary Packages
   Size: MD5

   php-4.2.3-29.i586.rpm
      1602892 15ae00189ad13d808180ce92222dfa73
   php-imap-4.2.3-29.i586.rpm
         9782 e7d5140e14a1f248237899146723279b
   php-ldap-4.2.3-29.i586.rpm
        24793 be6527bf8763b171033d7b2a7cbea19c
   php-manual-4.2.3-29.i586.rpm
       342273 1b89bb58a6f864bbf12b437a9e702bbb
   php-mysql-4.2.3-29.i586.rpm
        87162 c521d5850f3a3f4e5ddd46f6c732cf87
   php-pgsql-4.2.3-29.i586.rpm
        35853 dc64cb0e18f33f31c4d175c665efbc95


 CVE
   [CAN-2006-0207]
   http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2006-0207
   [CAN-2006-0208]
   http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2006-0208
   [CAN-2006-1494]
   http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2006-1494
   [CAN-2006-1608]
   http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2006-1608

 --------------------------------------------------------------------------
 Revision History
    28 Jul 2006 Initial release
 --------------------------------------------------------------------------

 Copyright(C) 2006 Turbolinux, Inc. All rights reserved. 

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.0 (GNU/Linux)

iD8DBQFEyb8dK0LzjOqIJMwRAmpOAJ9+P80sdCSzP88rZfGkFBNC5YC5ywCff7F0
XP9e9H0TidC1fXY6+4c4VP0=
=Tr65
-----END PGP SIGNATURE-----