DSA-708-1 php3 -- missing input sanitising

Related Vulnerabilities: CVE-2005-0525  

An iDEFENSE researcher discovered two problems in the image processing functions of PHP, a server-side, HTML-embedded scripting language, of which one is present in PHP3 as well. When reading a JPEG image, PHP can be tricked into an endless loop due to insufficient input validation. For the stable distribution (woody) this problem has been fixed in version 3.0.18-23.1woody3. For the unstable distribution (sid) this problem has been fixed in version 3.0.18-31. We recommend that you upgrade your php3 package.

Debian Security Advisory

DSA-708-1 php3 -- missing input sanitising

Date Reported:
15 Apr 2005
Affected Packages:
php3
Vulnerable:
Yes
Security database references:
In the Debian bugtracking system: Bug 302701.
In Mitre's CVE dictionary: CVE-2005-0525.
More information:

An iDEFENSE researcher discovered two problems in the image processing functions of PHP, a server-side, HTML-embedded scripting language, of which one is present in PHP3 as well. When reading a JPEG image, PHP can be tricked into an endless loop due to insufficient input validation.

For the stable distribution (woody) this problem has been fixed in version 3.0.18-23.1woody3.

For the unstable distribution (sid) this problem has been fixed in version 3.0.18-31.

We recommend that you upgrade your php3 package.

Fixed in:

Debian GNU/Linux 3.0 (woody)

Source:
http://security.debian.org/pool/updates/main/p/php3/php3_3.0.18-23.1woody3.dsc
http://security.debian.org/pool/updates/main/p/php3/php3_3.0.18-23.1woody3.diff.gz
http://security.debian.org/pool/updates/main/p/php3/php3_3.0.18.orig.tar.gz
Architecture-independent component:
http://security.debian.org/pool/updates/main/p/php3/php3-doc_3.0.18-23.1woody3_all.deb
Alpha:
http://security.debian.org/pool/updates/main/p/php3/php3_3.0.18-23.1woody3_alpha.deb
http://security.debian.org/pool/updates/main/p/php3/php3-cgi_3.0.18-23.1woody3_alpha.deb
http://security.debian.org/pool/updates/main/p/php3/php3-cgi-gd_3.0.18-23.1woody3_alpha.deb
http://security.debian.org/pool/updates/main/p/php3/php3-cgi-imap_3.0.18-23.1woody3_alpha.deb
http://security.debian.org/pool/updates/main/p/php3/php3-cgi-ldap_3.0.18-23.1woody3_alpha.deb
http://security.debian.org/pool/updates/main/p/php3/php3-cgi-magick_3.0.18-23.1woody3_alpha.deb
http://security.debian.org/pool/updates/main/p/php3/php3-cgi-mhash_3.0.18-23.1woody3_alpha.deb
http://security.debian.org/pool/updates/main/p/php3/php3-cgi-mysql_3.0.18-23.1woody3_alpha.deb
http://security.debian.org/pool/updates/main/p/php3/php3-cgi-snmp_3.0.18-23.1woody3_alpha.deb
http://security.debian.org/pool/updates/main/p/php3/php3-cgi-xml_3.0.18-23.1woody3_alpha.deb
http://security.debian.org/pool/updates/main/p/php3/php3-dev_3.0.18-23.1woody3_alpha.deb
http://security.debian.org/pool/updates/main/p/php3/php3-gd_3.0.18-23.1woody3_alpha.deb
http://security.debian.org/pool/updates/main/p/php3/php3-imap_3.0.18-23.1woody3_alpha.deb
http://security.debian.org/pool/updates/main/p/php3/php3-ldap_3.0.18-23.1woody3_alpha.deb
http://security.debian.org/pool/updates/main/p/php3/php3-magick_3.0.18-23.1woody3_alpha.deb
http://security.debian.org/pool/updates/main/p/php3/php3-mhash_3.0.18-23.1woody3_alpha.deb
http://security.debian.org/pool/updates/main/p/php3/php3-mysql_3.0.18-23.1woody3_alpha.deb
http://security.debian.org/pool/updates/main/p/php3/php3-snmp_3.0.18-23.1woody3_alpha.deb
http://security.debian.org/pool/updates/main/p/php3/php3-xml_3.0.18-23.1woody3_alpha.deb
ARM:
http://security.debian.org/pool/updates/main/p/php3/php3_3.0.18-23.1woody3_arm.deb
http://security.debian.org/pool/updates/main/p/php3/php3-cgi_3.0.18-23.1woody3_arm.deb
http://security.debian.org/pool/updates/main/p/php3/php3-cgi-gd_3.0.18-23.1woody3_arm.deb
http://security.debian.org/pool/updates/main/p/php3/php3-cgi-imap_3.0.18-23.1woody3_arm.deb
http://security.debian.org/pool/updates/main/p/php3/php3-cgi-ldap_3.0.18-23.1woody3_arm.deb
http://security.debian.org/pool/updates/main/p/php3/php3-cgi-magick_3.0.18-23.1woody3_arm.deb
http://security.debian.org/pool/updates/main/p/php3/php3-cgi-mhash_3.0.18-23.1woody3_arm.deb
http://security.debian.org/pool/updates/main/p/php3/php3-cgi-mysql_3.0.18-23.1woody3_arm.deb
http://security.debian.org/pool/updates/main/p/php3/php3-cgi-snmp_3.0.18-23.1woody3_arm.deb
http://security.debian.org/pool/updates/main/p/php3/php3-cgi-xml_3.0.18-23.1woody3_arm.deb
http://security.debian.org/pool/updates/main/p/php3/php3-dev_3.0.18-23.1woody3_arm.deb
http://security.debian.org/pool/updates/main/p/php3/php3-gd_3.0.18-23.1woody3_arm.deb
http://security.debian.org/pool/updates/main/p/php3/php3-imap_3.0.18-23.1woody3_arm.deb
http://security.debian.org/pool/updates/main/p/php3/php3-ldap_3.0.18-23.1woody3_arm.deb
http://security.debian.org/pool/updates/main/p/php3/php3-magick_3.0.18-23.1woody3_arm.deb
http://security.debian.org/pool/updates/main/p/php3/php3-mhash_3.0.18-23.1woody3_arm.deb
http://security.debian.org/pool/updates/main/p/php3/php3-mysql_3.0.18-23.1woody3_arm.deb
http://security.debian.org/pool/updates/main/p/php3/php3-snmp_3.0.18-23.1woody3_arm.deb
http://security.debian.org/pool/updates/main/p/php3/php3-xml_3.0.18-23.1woody3_arm.deb
Intel IA-32:
http://security.debian.org/pool/updates/main/p/php3/php3_3.0.18-23.1woody3_i386.deb
http://security.debian.org/pool/updates/main/p/php3/php3-cgi_3.0.18-23.1woody3_i386.deb
http://security.debian.org/pool/updates/main/p/php3/php3-cgi-gd_3.0.18-23.1woody3_i386.deb
http://security.debian.org/pool/updates/main/p/php3/php3-cgi-imap_3.0.18-23.1woody3_i386.deb
http://security.debian.org/pool/updates/main/p/php3/php3-cgi-ldap_3.0.18-23.1woody3_i386.deb
http://security.debian.org/pool/updates/main/p/php3/php3-cgi-magick_3.0.18-23.1woody3_i386.deb
http://security.debian.org/pool/updates/main/p/php3/php3-cgi-mhash_3.0.18-23.1woody3_i386.deb
http://security.debian.org/pool/updates/main/p/php3/php3-cgi-mysql_3.0.18-23.1woody3_i386.deb
http://security.debian.org/pool/updates/main/p/php3/php3-cgi-snmp_3.0.18-23.1woody3_i386.deb
http://security.debian.org/pool/updates/main/p/php3/php3-cgi-xml_3.0.18-23.1woody3_i386.deb
http://security.debian.org/pool/updates/main/p/php3/php3-dev_3.0.18-23.1woody3_i386.deb
http://security.debian.org/pool/updates/main/p/php3/php3-gd_3.0.18-23.1woody3_i386.deb
http://security.debian.org/pool/updates/main/p/php3/php3-imap_3.0.18-23.1woody3_i386.deb
http://security.debian.org/pool/updates/main/p/php3/php3-ldap_3.0.18-23.1woody3_i386.deb
http://security.debian.org/pool/updates/main/p/php3/php3-magick_3.0.18-23.1woody3_i386.deb
http://security.debian.org/pool/updates/main/p/php3/php3-mhash_3.0.18-23.1woody3_i386.deb
http://security.debian.org/pool/updates/main/p/php3/php3-mysql_3.0.18-23.1woody3_i386.deb
http://security.debian.org/pool/updates/main/p/php3/php3-snmp_3.0.18-23.1woody3_i386.deb
http://security.debian.org/pool/updates/main/p/php3/php3-xml_3.0.18-23.1woody3_i386.deb
Intel IA-64:
http://security.debian.org/pool/updates/main/p/php3/php3_3.0.18-23.1woody3_ia64.deb
http://security.debian.org/pool/updates/main/p/php3/php3-cgi_3.0.18-23.1woody3_ia64.deb
http://security.debian.org/pool/updates/main/p/php3/php3-cgi-gd_3.0.18-23.1woody3_ia64.deb
http://security.debian.org/pool/updates/main/p/php3/php3-cgi-imap_3.0.18-23.1woody3_ia64.deb
http://security.debian.org/pool/updates/main/p/php3/php3-cgi-ldap_3.0.18-23.1woody3_ia64.deb
http://security.debian.org/pool/updates/main/p/php3/php3-cgi-magick_3.0.18-23.1woody3_ia64.deb
http://security.debian.org/pool/updates/main/p/php3/php3-cgi-mhash_3.0.18-23.1woody3_ia64.deb
http://security.debian.org/pool/updates/main/p/php3/php3-cgi-mysql_3.0.18-23.1woody3_ia64.deb
http://security.debian.org/pool/updates/main/p/php3/php3-cgi-snmp_3.0.18-23.1woody3_ia64.deb
http://security.debian.org/pool/updates/main/p/php3/php3-cgi-xml_3.0.18-23.1woody3_ia64.deb
http://security.debian.org/pool/updates/main/p/php3/php3-dev_3.0.18-23.1woody3_ia64.deb
http://security.debian.org/pool/updates/main/p/php3/php3-gd_3.0.18-23.1woody3_ia64.deb
http://security.debian.org/pool/updates/main/p/php3/php3-imap_3.0.18-23.1woody3_ia64.deb
http://security.debian.org/pool/updates/main/p/php3/php3-ldap_3.0.18-23.1woody3_ia64.deb
http://security.debian.org/pool/updates/main/p/php3/php3-magick_3.0.18-23.1woody3_ia64.deb
http://security.debian.org/pool/updates/main/p/php3/php3-mhash_3.0.18-23.1woody3_ia64.deb
http://security.debian.org/pool/updates/main/p/php3/php3-mysql_3.0.18-23.1woody3_ia64.deb
http://security.debian.org/pool/updates/main/p/php3/php3-snmp_3.0.18-23.1woody3_ia64.deb
http://security.debian.org/pool/updates/main/p/php3/php3-xml_3.0.18-23.1woody3_ia64.deb
HPPA:
http://security.debian.org/pool/updates/main/p/php3/php3_3.0.18-23.1woody3_hppa.deb
http://security.debian.org/pool/updates/main/p/php3/php3-cgi_3.0.18-23.1woody3_hppa.deb
http://security.debian.org/pool/updates/main/p/php3/php3-cgi-gd_3.0.18-23.1woody3_hppa.deb
http://security.debian.org/pool/updates/main/p/php3/php3-cgi-imap_3.0.18-23.1woody3_hppa.deb
http://security.debian.org/pool/updates/main/p/php3/php3-cgi-ldap_3.0.18-23.1woody3_hppa.deb
http://security.debian.org/pool/updates/main/p/php3/php3-cgi-magick_3.0.18-23.1woody3_hppa.deb
http://security.debian.org/pool/updates/main/p/php3/php3-cgi-mhash_3.0.18-23.1woody3_hppa.deb
http://security.debian.org/pool/updates/main/p/php3/php3-cgi-mysql_3.0.18-23.1woody3_hppa.deb
http://security.debian.org/pool/updates/main/p/php3/php3-cgi-snmp_3.0.18-23.1woody3_hppa.deb
http://security.debian.org/pool/updates/main/p/php3/php3-cgi-xml_3.0.18-23.1woody3_hppa.deb
http://security.debian.org/pool/updates/main/p/php3/php3-dev_3.0.18-23.1woody3_hppa.deb
http://security.debian.org/pool/updates/main/p/php3/php3-gd_3.0.18-23.1woody3_hppa.deb
http://security.debian.org/pool/updates/main/p/php3/php3-imap_3.0.18-23.1woody3_hppa.deb
http://security.debian.org/pool/updates/main/p/php3/php3-ldap_3.0.18-23.1woody3_hppa.deb
http://security.debian.org/pool/updates/main/p/php3/php3-magick_3.0.18-23.1woody3_hppa.deb
http://security.debian.org/pool/updates/main/p/php3/php3-mhash_3.0.18-23.1woody3_hppa.deb
http://security.debian.org/pool/updates/main/p/php3/php3-mysql_3.0.18-23.1woody3_hppa.deb
http://security.debian.org/pool/updates/main/p/php3/php3-snmp_3.0.18-23.1woody3_hppa.deb
http://security.debian.org/pool/updates/main/p/php3/php3-xml_3.0.18-23.1woody3_hppa.deb
Motorola 680x0:
http://security.debian.org/pool/updates/main/p/php3/php3_3.0.18-23.1woody3_m68k.deb
http://security.debian.org/pool/updates/main/p/php3/php3-cgi_3.0.18-23.1woody3_m68k.deb
http://security.debian.org/pool/updates/main/p/php3/php3-cgi-gd_3.0.18-23.1woody3_m68k.deb
http://security.debian.org/pool/updates/main/p/php3/php3-cgi-imap_3.0.18-23.1woody3_m68k.deb
http://security.debian.org/pool/updates/main/p/php3/php3-cgi-ldap_3.0.18-23.1woody3_m68k.deb
http://security.debian.org/pool/updates/main/p/php3/php3-cgi-magick_3.0.18-23.1woody3_m68k.deb
http://security.debian.org/pool/updates/main/p/php3/php3-cgi-mhash_3.0.18-23.1woody3_m68k.deb
http://security.debian.org/pool/updates/main/p/php3/php3-cgi-mysql_3.0.18-23.1woody3_m68k.deb
http://security.debian.org/pool/updates/main/p/php3/php3-cgi-snmp_3.0.18-23.1woody3_m68k.deb
http://security.debian.org/pool/updates/main/p/php3/php3-cgi-xml_3.0.18-23.1woody3_m68k.deb
http://security.debian.org/pool/updates/main/p/php3/php3-dev_3.0.18-23.1woody3_m68k.deb
http://security.debian.org/pool/updates/main/p/php3/php3-gd_3.0.18-23.1woody3_m68k.deb
http://security.debian.org/pool/updates/main/p/php3/php3-imap_3.0.18-23.1woody3_m68k.deb
http://security.debian.org/pool/updates/main/p/php3/php3-ldap_3.0.18-23.1woody3_m68k.deb
http://security.debian.org/pool/updates/main/p/php3/php3-magick_3.0.18-23.1woody3_m68k.deb
http://security.debian.org/pool/updates/main/p/php3/php3-mhash_3.0.18-23.1woody3_m68k.deb
http://security.debian.org/pool/updates/main/p/php3/php3-mysql_3.0.18-23.1woody3_m68k.deb
http://security.debian.org/pool/updates/main/p/php3/php3-snmp_3.0.18-23.1woody3_m68k.deb
http://security.debian.org/pool/updates/main/p/php3/php3-xml_3.0.18-23.1woody3_m68k.deb
Big endian MIPS:
http://security.debian.org/pool/updates/main/p/php3/php3_3.0.18-23.1woody3_mips.deb
http://security.debian.org/pool/updates/main/p/php3/php3-cgi_3.0.18-23.1woody3_mips.deb
http://security.debian.org/pool/updates/main/p/php3/php3-cgi-gd_3.0.18-23.1woody3_mips.deb
http://security.debian.org/pool/updates/main/p/php3/php3-cgi-imap_3.0.18-23.1woody3_mips.deb
http://security.debian.org/pool/updates/main/p/php3/php3-cgi-ldap_3.0.18-23.1woody3_mips.deb
http://security.debian.org/pool/updates/main/p/php3/php3-cgi-magick_3.0.18-23.1woody3_mips.deb
http://security.debian.org/pool/updates/main/p/php3/php3-cgi-mhash_3.0.18-23.1woody3_mips.deb
http://security.debian.org/pool/updates/main/p/php3/php3-cgi-mysql_3.0.18-23.1woody3_mips.deb
http://security.debian.org/pool/updates/main/p/php3/php3-cgi-snmp_3.0.18-23.1woody3_mips.deb
http://security.debian.org/pool/updates/main/p/php3/php3-cgi-xml_3.0.18-23.1woody3_mips.deb
http://security.debian.org/pool/updates/main/p/php3/php3-dev_3.0.18-23.1woody3_mips.deb
http://security.debian.org/pool/updates/main/p/php3/php3-gd_3.0.18-23.1woody3_mips.deb
http://security.debian.org/pool/updates/main/p/php3/php3-imap_3.0.18-23.1woody3_mips.deb
http://security.debian.org/pool/updates/main/p/php3/php3-ldap_3.0.18-23.1woody3_mips.deb
http://security.debian.org/pool/updates/main/p/php3/php3-magick_3.0.18-23.1woody3_mips.deb
http://security.debian.org/pool/updates/main/p/php3/php3-mhash_3.0.18-23.1woody3_mips.deb
http://security.debian.org/pool/updates/main/p/php3/php3-mysql_3.0.18-23.1woody3_mips.deb
http://security.debian.org/pool/updates/main/p/php3/php3-snmp_3.0.18-23.1woody3_mips.deb
http://security.debian.org/pool/updates/main/p/php3/php3-xml_3.0.18-23.1woody3_mips.deb
Little endian MIPS:
http://security.debian.org/pool/updates/main/p/php3/php3_3.0.18-23.1woody3_mipsel.deb
http://security.debian.org/pool/updates/main/p/php3/php3-cgi_3.0.18-23.1woody3_mipsel.deb
http://security.debian.org/pool/updates/main/p/php3/php3-cgi-gd_3.0.18-23.1woody3_mipsel.deb
http://security.debian.org/pool/updates/main/p/php3/php3-cgi-imap_3.0.18-23.1woody3_mipsel.deb
http://security.debian.org/pool/updates/main/p/php3/php3-cgi-ldap_3.0.18-23.1woody3_mipsel.deb
http://security.debian.org/pool/updates/main/p/php3/php3-cgi-magick_3.0.18-23.1woody3_mipsel.deb
http://security.debian.org/pool/updates/main/p/php3/php3-cgi-mhash_3.0.18-23.1woody3_mipsel.deb
http://security.debian.org/pool/updates/main/p/php3/php3-cgi-mysql_3.0.18-23.1woody3_mipsel.deb
http://security.debian.org/pool/updates/main/p/php3/php3-cgi-snmp_3.0.18-23.1woody3_mipsel.deb
http://security.debian.org/pool/updates/main/p/php3/php3-cgi-xml_3.0.18-23.1woody3_mipsel.deb
http://security.debian.org/pool/updates/main/p/php3/php3-dev_3.0.18-23.1woody3_mipsel.deb
http://security.debian.org/pool/updates/main/p/php3/php3-gd_3.0.18-23.1woody3_mipsel.deb
http://security.debian.org/pool/updates/main/p/php3/php3-imap_3.0.18-23.1woody3_mipsel.deb
http://security.debian.org/pool/updates/main/p/php3/php3-ldap_3.0.18-23.1woody3_mipsel.deb
http://security.debian.org/pool/updates/main/p/php3/php3-magick_3.0.18-23.1woody3_mipsel.deb
http://security.debian.org/pool/updates/main/p/php3/php3-mhash_3.0.18-23.1woody3_mipsel.deb
http://security.debian.org/pool/updates/main/p/php3/php3-mysql_3.0.18-23.1woody3_mipsel.deb
http://security.debian.org/pool/updates/main/p/php3/php3-snmp_3.0.18-23.1woody3_mipsel.deb
http://security.debian.org/pool/updates/main/p/php3/php3-xml_3.0.18-23.1woody3_mipsel.deb
PowerPC:
http://security.debian.org/pool/updates/main/p/php3/php3_3.0.18-23.1woody3_powerpc.deb
http://security.debian.org/pool/updates/main/p/php3/php3-cgi_3.0.18-23.1woody3_powerpc.deb
http://security.debian.org/pool/updates/main/p/php3/php3-cgi-gd_3.0.18-23.1woody3_powerpc.deb
http://security.debian.org/pool/updates/main/p/php3/php3-cgi-imap_3.0.18-23.1woody3_powerpc.deb
http://security.debian.org/pool/updates/main/p/php3/php3-cgi-ldap_3.0.18-23.1woody3_powerpc.deb
http://security.debian.org/pool/updates/main/p/php3/php3-cgi-magick_3.0.18-23.1woody3_powerpc.deb
http://security.debian.org/pool/updates/main/p/php3/php3-cgi-mhash_3.0.18-23.1woody3_powerpc.deb
http://security.debian.org/pool/updates/main/p/php3/php3-cgi-mysql_3.0.18-23.1woody3_powerpc.deb
http://security.debian.org/pool/updates/main/p/php3/php3-cgi-snmp_3.0.18-23.1woody3_powerpc.deb
http://security.debian.org/pool/updates/main/p/php3/php3-cgi-xml_3.0.18-23.1woody3_powerpc.deb
http://security.debian.org/pool/updates/main/p/php3/php3-dev_3.0.18-23.1woody3_powerpc.deb
http://security.debian.org/pool/updates/main/p/php3/php3-gd_3.0.18-23.1woody3_powerpc.deb
http://security.debian.org/pool/updates/main/p/php3/php3-imap_3.0.18-23.1woody3_powerpc.deb
http://security.debian.org/pool/updates/main/p/php3/php3-ldap_3.0.18-23.1woody3_powerpc.deb
http://security.debian.org/pool/updates/main/p/php3/php3-magick_3.0.18-23.1woody3_powerpc.deb
http://security.debian.org/pool/updates/main/p/php3/php3-mhash_3.0.18-23.1woody3_powerpc.deb
http://security.debian.org/pool/updates/main/p/php3/php3-mysql_3.0.18-23.1woody3_powerpc.deb
http://security.debian.org/pool/updates/main/p/php3/php3-snmp_3.0.18-23.1woody3_powerpc.deb
http://security.debian.org/pool/updates/main/p/php3/php3-xml_3.0.18-23.1woody3_powerpc.deb
IBM S/390:
http://security.debian.org/pool/updates/main/p/php3/php3_3.0.18-23.1woody3_s390.deb
http://security.debian.org/pool/updates/main/p/php3/php3-cgi_3.0.18-23.1woody3_s390.deb
http://security.debian.org/pool/updates/main/p/php3/php3-cgi-gd_3.0.18-23.1woody3_s390.deb
http://security.debian.org/pool/updates/main/p/php3/php3-cgi-imap_3.0.18-23.1woody3_s390.deb
http://security.debian.org/pool/updates/main/p/php3/php3-cgi-ldap_3.0.18-23.1woody3_s390.deb
http://security.debian.org/pool/updates/main/p/php3/php3-cgi-magick_3.0.18-23.1woody3_s390.deb
http://security.debian.org/pool/updates/main/p/php3/php3-cgi-mhash_3.0.18-23.1woody3_s390.deb
http://security.debian.org/pool/updates/main/p/php3/php3-cgi-mysql_3.0.18-23.1woody3_s390.deb
http://security.debian.org/pool/updates/main/p/php3/php3-cgi-snmp_3.0.18-23.1woody3_s390.deb
http://security.debian.org/pool/updates/main/p/php3/php3-cgi-xml_3.0.18-23.1woody3_s390.deb
http://security.debian.org/pool/updates/main/p/php3/php3-dev_3.0.18-23.1woody3_s390.deb
http://security.debian.org/pool/updates/main/p/php3/php3-gd_3.0.18-23.1woody3_s390.deb
http://security.debian.org/pool/updates/main/p/php3/php3-imap_3.0.18-23.1woody3_s390.deb
http://security.debian.org/pool/updates/main/p/php3/php3-ldap_3.0.18-23.1woody3_s390.deb
http://security.debian.org/pool/updates/main/p/php3/php3-magick_3.0.18-23.1woody3_s390.deb
http://security.debian.org/pool/updates/main/p/php3/php3-mhash_3.0.18-23.1woody3_s390.deb
http://security.debian.org/pool/updates/main/p/php3/php3-mysql_3.0.18-23.1woody3_s390.deb
http://security.debian.org/pool/updates/main/p/php3/php3-snmp_3.0.18-23.1woody3_s390.deb
http://security.debian.org/pool/updates/main/p/php3/php3-xml_3.0.18-23.1woody3_s390.deb
Sun Sparc:
http://security.debian.org/pool/updates/main/p/php3/php3_3.0.18-23.1woody3_sparc.deb
http://security.debian.org/pool/updates/main/p/php3/php3-cgi_3.0.18-23.1woody3_sparc.deb
http://security.debian.org/pool/updates/main/p/php3/php3-cgi-gd_3.0.18-23.1woody3_sparc.deb
http://security.debian.org/pool/updates/main/p/php3/php3-cgi-imap_3.0.18-23.1woody3_sparc.deb
http://security.debian.org/pool/updates/main/p/php3/php3-cgi-ldap_3.0.18-23.1woody3_sparc.deb
http://security.debian.org/pool/updates/main/p/php3/php3-cgi-magick_3.0.18-23.1woody3_sparc.deb
http://security.debian.org/pool/updates/main/p/php3/php3-cgi-mhash_3.0.18-23.1woody3_sparc.deb
http://security.debian.org/pool/updates/main/p/php3/php3-cgi-mysql_3.0.18-23.1woody3_sparc.deb
http://security.debian.org/pool/updates/main/p/php3/php3-cgi-snmp_3.0.18-23.1woody3_sparc.deb
http://security.debian.org/pool/updates/main/p/php3/php3-cgi-xml_3.0.18-23.1woody3_sparc.deb
http://security.debian.org/pool/updates/main/p/php3/php3-dev_3.0.18-23.1woody3_sparc.deb
http://security.debian.org/pool/updates/main/p/php3/php3-gd_3.0.18-23.1woody3_sparc.deb
http://security.debian.org/pool/updates/main/p/php3/php3-imap_3.0.18-23.1woody3_sparc.deb
http://security.debian.org/pool/updates/main/p/php3/php3-ldap_3.0.18-23.1woody3_sparc.deb
http://security.debian.org/pool/updates/main/p/php3/php3-magick_3.0.18-23.1woody3_sparc.deb
http://security.debian.org/pool/updates/main/p/php3/php3-mhash_3.0.18-23.1woody3_sparc.deb
http://security.debian.org/pool/updates/main/p/php3/php3-mysql_3.0.18-23.1woody3_sparc.deb
http://security.debian.org/pool/updates/main/p/php3/php3-snmp_3.0.18-23.1woody3_sparc.deb
http://security.debian.org/pool/updates/main/p/php3/php3-xml_3.0.18-23.1woody3_sparc.deb

MD5 checksums of the listed files are available in the original advisory.