[SECURITY] [DSA 1854-1] New APR packages fix arbitrary code execution

---

Debian Security Advisory DSA-1854-1 [email protected]
http://www.debian.org/security/ Florian Weimer
August 08, 2009 http://www.debian.org/security/faq

---

Package : apr, apr-util
Vulnerability : heap buffer overflow
Debian-specific: no
CVE Id(s) : CVE-2009-2412

Matt Lewis discovered that the memory management code in the Apache
Portable Runtime (APR) library does not guard against a wrap-around
during size computations. This could cause the library to return a
memory area which smaller than requested, resulting a heap overflow
and possibly arbitrary code execution.

For the old stable distribution (etch), this problem has been fixed in
version 1.2.7-9 of the apr package, and version 1.2.7+dfsg-2+etch3 of
the apr-util package.

For the stable distribution (lenny), this problem has been fixed in
version 1.2.12-5+lenny1 of the apr package and version 1.2.12-5+lenny1
of the apr-util package.

For the unstable distribution (sid), this problem will be fixed soon.

We recommend that you upgrade your APR packages.

Upgrade instructions

---

wget url
will fetch the file for you
dpkg -i file.deb
will install the referenced file.

If you are using the apt-get package manager, use the line for
sources.list as given below:

apt-get update
will update the internal database
apt-get upgrade
will install corrected packages

You may use an automated update by adding the resources from the
footer to the proper configuration.

Debian GNU/Linux 4.0 alias etch

---

Source archives:

http://security.debian.org/pool/updates/main/a/apr-util/apr-util_1.2.7+dfsg.orig.tar.gz
Size/MD5 checksum: 643328 a3117be657f99e92316be40add59b9ff
http://security.debian.org/pool/updates/main/a/apr-util/apr-util_1.2.7+dfsg-2+etch3.dsc
Size/MD5 checksum: 1036 9dc256c005a7f544c4d5c410b226fb74
http://security.debian.org/pool/updates/main/a/apr/apr_1.2.7-9.diff.gz
Size/MD5 checksum: 26613 021ef3aa5b3a9fc021779a0b6a6a4ec9
http://security.debian.org/pool/updates/main/a/apr-util/apr-util_1.2.7+dfsg-2+etch3.diff.gz
Size/MD5 checksum: 21651 e090ebfd7174c90bae4e4935a3d3db15
http://security.debian.org/pool/updates/main/a/apr/apr_1.2.7.orig.tar.gz
Size/MD5 checksum: 1102370 aea926cbe588f844ad9e317157d60175
http://security.debian.org/pool/updates/main/a/apr/apr_1.2.7-9.dsc
Size/MD5 checksum: 856 89662625fd7a34ceb514087de869d918

alpha architecture (DEC Alpha)

http://security.debian.org/pool/updates/main/a/apr/libapr1_1.2.7-9_alpha.deb
Size/MD5 checksum: 121726 df1e2d6e8bf9ed485ad417fe274eb0e3
http://security.debian.org/pool/updates/main/a/apr-util/libaprutil1_1.2.7+dfsg-2+etch3_alpha.deb
Size/MD5 checksum: 83690 b5873275f420b15f9868ea0dde699c60
http://security.debian.org/pool/updates/main/a/apr/libapr1-dev_1.2.7-9_alpha.deb
Size/MD5 checksum: 371668 4e8bd42151f3cdf8cee91c49599aab42
http://security.debian.org/pool/updates/main/a/apr-util/libaprutil1-dbg_1.2.7+dfsg-2+etch3_alpha.deb
Size/MD5 checksum: 129158 5074639b4b0d9877ff29b96540fdfaec
http://security.debian.org/pool/updates/main/a/apr/libapr1-dbg_1.2.7-9_alpha.deb
Size/MD5 checksum: 185420 ddf84849ff3bee792dc187c6d21958bd
http://security.debian.org/pool/updates/main/a/apr-util/libaprutil1-dev_1.2.7+dfsg-2+etch3_alpha.deb
Size/MD5 checksum: 148140 079cff06535a7e3f4e9a5d682d80bb1b

amd64 architecture (AMD x86_64 (AMD64))

http://security.debian.org/pool/updates/main/a/apr-util/libaprutil1_1.2.7+dfsg-2+etch3_amd64.deb
Size/MD5 checksum: 72946 6b11e4b65bdf67981a091177d9644007
http://security.debian.org/pool/updates/main/a/apr-util/libaprutil1-dev_1.2.7+dfsg-2+etch3_amd64.deb
Size/MD5 checksum: 126156 b420f555d02504e0497a0ba3c27e0cac
http://security.debian.org/pool/updates/main/a/apr-util/libaprutil1-dbg_1.2.7+dfsg-2+etch3_amd64.deb
Size/MD5 checksum: 127742 1606857f3291ccb10e038219f1f2eab3
http://security.debian.org/pool/updates/main/a/apr/libapr1-dbg_1.2.7-9_amd64.deb
Size/MD5 checksum: 187302 bb1a4aa5768fa012201ad1e72bc27e93
http://security.debian.org/pool/updates/main/a/apr/libapr1-dev_1.2.7-9_amd64.deb
Size/MD5 checksum: 348120 b5d6b4e7c628dffe867159b54b6c82f1
http://security.debian.org/pool/updates/main/a/apr/libapr1_1.2.7-9_amd64.deb
Size/MD5 checksum: 111664 6b51dc29ea4defa975902d246188086f

arm architecture (ARM)

http://security.debian.org/pool/updates/main/a/apr-util/libaprutil1-dbg_1.2.7+dfsg-2+etch3_arm.deb
Size/MD5 checksum: 121504 3ba789c274f2ed7030aa286ea57dbb3d
http://security.debian.org/pool/updates/main/a/apr/libapr1-dbg_1.2.7-9_arm.deb
Size/MD5 checksum: 175146 86ff258e9181fa424cb043dc22e2c0e0
http://security.debian.org/pool/updates/main/a/apr-util/libaprutil1-dev_1.2.7+dfsg-2+etch3_arm.deb
Size/MD5 checksum: 117302 97d701c8f9d6746eb14448bfde8e8588
http://security.debian.org/pool/updates/main/a/apr/libapr1_1.2.7-9_arm.deb
Size/MD5 checksum: 104934 45a976662beb7ec3b15ee7c7a45f3de7
http://security.debian.org/pool/updates/main/a/apr-util/libaprutil1_1.2.7+dfsg-2+etch3_arm.deb
Size/MD5 checksum: 66110 09c54142359236f50654bd9c7b375781
http://security.debian.org/pool/updates/main/a/apr/libapr1-dev_1.2.7-9_arm.deb
Size/MD5 checksum: 335520 14d06ecfb54247718b780c893df8f4cc

hppa architecture (HP PA RISC)

http://security.debian.org/pool/updates/main/a/apr-util/libaprutil1-dbg_1.2.7+dfsg-2+etch3_hppa.deb
Size/MD5 checksum: 126186 9494353aa42e983a245af2890dd2c6d7
http://security.debian.org/pool/updates/main/a/apr-util/libaprutil1_1.2.7+dfsg-2+etch3_hppa.deb
Size/MD5 checksum: 78668 60c87b0e86c1ed31deecddd88cdf5fa5
http://security.debian.org/pool/updates/main/a/apr-util/libaprutil1-dev_1.2.7+dfsg-2+etch3_hppa.deb
Size/MD5 checksum: 133918 ae993c733053a326603c5b750505bee9

i386 architecture (Intel ia32)

http://security.debian.org/pool/updates/main/a/apr-util/libaprutil1-dev_1.2.7+dfsg-2+etch3_i386.deb
Size/MD5 checksum: 116052 6238f10eb5077bb53b9664b82b985c40
http://security.debian.org/pool/updates/main/a/apr/libapr1-dev_1.2.7-9_i386.deb
Size/MD5 checksum: 338694 262cec472ec3aaeb1b4d38eebaa940c8
http://security.debian.org/pool/updates/main/a/apr-util/libaprutil1_1.2.7+dfsg-2+etch3_i386.deb
Size/MD5 checksum: 68854 78ab4f6425153d8b746b99842994d555
http://security.debian.org/pool/updates/main/a/apr/libapr1_1.2.7-9_i386.deb
Size/MD5 checksum: 109138 4aa254cacd4e95785ae823cedb1cce2f
http://security.debian.org/pool/updates/main/a/apr-util/libaprutil1-dbg_1.2.7+dfsg-2+etch3_i386.deb
Size/MD5 checksum: 122136 4a16475bb5780625902c79069681ae74
http://security.debian.org/pool/updates/main/a/apr/libapr1-dbg_1.2.7-9_i386.deb
Size/MD5 checksum: 180654 481471d06045a2e348b55de6dbdf5f94

ia64 architecture (Intel ia64)

http://security.debian.org/pool/updates/main/a/apr-util/libaprutil1-dev_1.2.7+dfsg-2+etch3_ia64.deb
Size/MD5 checksum: 156562 52761fff3e82e21728e0c6a79bf4508f
http://security.debian.org/pool/updates/main/a/apr-util/libaprutil1_1.2.7+dfsg-2+etch3_ia64.deb
Size/MD5 checksum: 99446 3ad58d882e434e39be525e7aa41d9e93
http://security.debian.org/pool/updates/main/a/apr/libapr1_1.2.7-9_ia64.deb
Size/MD5 checksum: 141894 5b7351a6b4c3765e3d76b9d22e04cf0e
http://security.debian.org/pool/updates/main/a/apr-util/libaprutil1-dbg_1.2.7+dfsg-2+etch3_ia64.deb
Size/MD5 checksum: 118716 8c73712293cd4d9a5935aefd18a3e4c9
http://security.debian.org/pool/updates/main/a/apr/libapr1-dbg_1.2.7-9_ia64.deb
Size/MD5 checksum: 171514 f474001e4f852a44af517b5d6f737a65
http://security.debian.org/pool/updates/main/a/apr/libapr1-dev_1.2.7-9_ia64.deb
Size/MD5 checksum: 385514 76d0bbda16c749f6a5b40fd6297a180a

mips architecture (MIPS (Big Endian))

http://security.debian.org/pool/updates/main/a/apr/libapr1-dbg_1.2.7-9_mips.deb
Size/MD5 checksum: 188816 de1ecb467042d2c1891cc1d2f5db83d9
http://security.debian.org/pool/updates/main/a/apr-util/libaprutil1-dbg_1.2.7+dfsg-2+etch3_mips.deb
Size/MD5 checksum: 130394 fc34d9b137c080b63374d809c1d6bf8b
http://security.debian.org/pool/updates/main/a/apr-util/libaprutil1-dev_1.2.7+dfsg-2+etch3_mips.deb
Size/MD5 checksum: 130492 4d7cdffabbef214eeea0c02a346d0eb8
http://security.debian.org/pool/updates/main/a/apr-util/libaprutil1_1.2.7+dfsg-2+etch3_mips.deb
Size/MD5 checksum: 70776 6fe66f5cb81c2a3af2fa0cd64a85cfd8
http://security.debian.org/pool/updates/main/a/apr/libapr1-dev_1.2.7-9_mips.deb
Size/MD5 checksum: 357368 aab08f1596aead97cc48924ebf99c80e
http://security.debian.org/pool/updates/main/a/apr/libapr1_1.2.7-9_mips.deb
Size/MD5 checksum: 112644 9c6d720999259453daaa13e8ec3c8336

mipsel architecture (MIPS (Little Endian))

http://security.debian.org/pool/updates/main/a/apr/libapr1-dbg_1.2.7-9_mipsel.deb
Size/MD5 checksum: 186464 5b2392a143ff8a173a771b819377ab47
http://security.debian.org/pool/updates/main/a/apr-util/libaprutil1-dbg_1.2.7+dfsg-2+etch3_mipsel.deb
Size/MD5 checksum: 128052 02e3c278190e92d7131c275aab5f5c44
http://security.debian.org/pool/updates/main/a/apr/libapr1-dev_1.2.7-9_mipsel.deb
Size/MD5 checksum: 358010 480087a77642a8ff99a32bb323b62600
http://security.debian.org/pool/updates/main/a/apr-util/libaprutil1-dev_1.2.7+dfsg-2+etch3_mipsel.deb
Size/MD5 checksum: 130712 50da703a75deb2ba87d4be171e80bd5b
http://security.debian.org/pool/updates/main/a/apr/libapr1_1.2.7-9_mipsel.deb
Size/MD5 checksum: 113352 d363370bcba834268202db5271b20aa3
http://security.debian.org/pool/updates/main/a/apr-util/libaprutil1_1.2.7+dfsg-2+etch3_mipsel.deb
Size/MD5 checksum: 70794 1f57c4362c286bd0d2df40d775690612

powerpc architecture (PowerPC)

http://security.debian.org/pool/updates/main/a/apr-util/libaprutil1-dev_1.2.7+dfsg-2+etch3_powerpc.deb
Size/MD5 checksum: 125106 92d5d46effd18aaa8e849254d9da8acd
http://security.debian.org/pool/updates/main/a/apr/libapr1-dev_1.2.7-9_powerpc.deb
Size/MD5 checksum: 348504 2f4f96652c28e3f5f1cfae8e5265ec83
http://security.debian.org/pool/updates/main/a/apr-util/libaprutil1-dbg_1.2.7+dfsg-2+etch3_powerpc.deb
Size/MD5 checksum: 130380 dacdce767bcff6b0ecbe66add6838e8b
http://security.debian.org/pool/updates/main/a/apr/libapr1-dbg_1.2.7-9_powerpc.deb
Size/MD5 checksum: 189780 ae1e23e3080fbfe3ba26b8acf9561d6c
http://security.debian.org/pool/updates/main/a/apr/libapr1_1.2.7-9_powerpc.deb
Size/MD5 checksum: 113956 1e2ba4da9ee0775325b351887c182f52
http://security.debian.org/pool/updates/main/a/apr-util/libaprutil1_1.2.7+dfsg-2+etch3_powerpc.deb
Size/MD5 checksum: 72472 3a47c9eca3ec7b6f4e87609b3aca7f65

s390 architecture (IBM S/390)

http://security.debian.org/pool/updates/main/a/apr-util/libaprutil1-dev_1.2.7+dfsg-2+etch3_s390.deb
Size/MD5 checksum: 124802 cdd46922b57a51fedb25ae401d8dc753
http://security.debian.org/pool/updates/main/a/apr/libapr1_1.2.7-9_s390.deb
Size/MD5 checksum: 121978 71edc1d101933b1a43a9c395427a4aed
http://security.debian.org/pool/updates/main/a/apr-util/libaprutil1-dbg_1.2.7+dfsg-2+etch3_s390.deb
Size/MD5 checksum: 128570 f0f7d5dfecb61c6212e0803a325e8a01
http://security.debian.org/pool/updates/main/a/apr/libapr1-dbg_1.2.7-9_s390.deb
Size/MD5 checksum: 186320 cca313c55848e6161810ff16fb71390f
http://security.debian.org/pool/updates/main/a/apr/libapr1-dev_1.2.7-9_s390.deb
Size/MD5 checksum: 349848 b9cbaa0a70b9bfa28d74ac4a6e107428
http://security.debian.org/pool/updates/main/a/apr-util/libaprutil1_1.2.7+dfsg-2+etch3_s390.deb
Size/MD5 checksum: 76668 f6b5e093ae1c3c5d4442e223115052de

sparc architecture (Sun SPARC/UltraSPARC)

http://security.debian.org/pool/updates/main/a/apr/libapr1-dev_1.2.7-9_sparc.deb
Size/MD5 checksum: 338056 ab06437e18c1cc36dab35779cc4102d8
http://security.debian.org/pool/updates/main/a/apr/libapr1_1.2.7-9_sparc.deb
Size/MD5 checksum: 103200 1c6f94d15f4e3052e9ed80fc232f96b5
http://security.debian.org/pool/updates/main/a/apr-util/libaprutil1-dev_1.2.7+dfsg-2+etch3_sparc.deb
Size/MD5 checksum: 117840 5f0671d301a9e2ea8020d0dcaa71a42b
http://security.debian.org/pool/updates/main/a/apr-util/libaprutil1_1.2.7+dfsg-2+etch3_sparc.deb
Size/MD5 checksum: 66374 668815a44c99c366ae8e3f624613932e
http://security.debian.org/pool/updates/main/a/apr/libapr1-dbg_1.2.7-9_sparc.deb
Size/MD5 checksum: 167962 f338f71eeb38be58c67d1ac0fd92d1ff
http://security.debian.org/pool/updates/main/a/apr-util/libaprutil1-dbg_1.2.7+dfsg-2+etch3_sparc.deb
Size/MD5 checksum: 117510 63dd9c471f24472eb46a5fd9dcb92077

Debian GNU/Linux 5.0 alias lenny

---

Source archives:

http://security.debian.org/pool/updates/main/a/apr/apr_1.2.12.orig.tar.gz
Size/MD5 checksum: 1127522 020ea947446dca2d1210c099c7a4c837
http://security.debian.org/pool/updates/main/a/apr/apr_1.2.12-5+lenny1.diff.gz
Size/MD5 checksum: 12398 b407ff7dac7363278f4f060e121aa611
http://security.debian.org/pool/updates/main/a/apr-util/apr-util_1.2.12+dfsg.orig.tar.gz
Size/MD5 checksum: 658687 4ef3e41037fe0cdd3a0d107335a008eb
http://security.debian.org/pool/updates/main/a/apr-util/apr-util_1.2.12+dfsg-8+lenny4.dsc
Size/MD5 checksum: 1530 dccceaa89d58074be3b7b7738a99756b
http://security.debian.org/pool/updates/main/a/apr-util/apr-util_1.2.12+dfsg-8+lenny4.diff.gz
Size/MD5 checksum: 23138 a2222477de9ad92015416542a2c250ed
http://security.debian.org/pool/updates/main/a/apr/apr_1.2.12-5+lenny1.dsc
Size/MD5 checksum: 1284 4330306f892fd7c0950b1ccf2537b38d

alpha architecture (DEC Alpha)

http://security.debian.org/pool/updates/main/a/apr/libapr1-dev_1.2.12-5+lenny1_alpha.deb
Size/MD5 checksum: 806236 3689d5ee779d3846fe67c9dad2f213dc
http://security.debian.org/pool/updates/main/a/apr/libapr1-dbg_1.2.12-5+lenny1_alpha.deb
Size/MD5 checksum: 53204 92bb2e8a7c48e6f8437680e08607a3f7
http://security.debian.org/pool/updates/main/a/apr-util/libaprutil1-dbg_1.2.12+dfsg-8+lenny4_alpha.deb
Size/MD5 checksum: 147658 edba141e93c382fbf0ab2bbec1dba899
http://security.debian.org/pool/updates/main/a/apr-util/libaprutil1-dev_1.2.12+dfsg-8+lenny4_alpha.deb
Size/MD5 checksum: 158060 b80ad32790c6c8d89f0007a69d9ce0b8
http://security.debian.org/pool/updates/main/a/apr-util/libaprutil1_1.2.12+dfsg-8+lenny4_alpha.deb
Size/MD5 checksum: 90740 c715b55d060a2d4e8d7684477d0b9014
http://security.debian.org/pool/updates/main/a/apr/libapr1_1.2.12-5+lenny1_alpha.deb
Size/MD5 checksum: 121774 565a4fdd123d04698907456e40d4df0b

amd64 architecture (AMD x86_64 (AMD64))

http://security.debian.org/pool/updates/main/a/apr/libapr1-dbg_1.2.12-5+lenny1_amd64.deb
Size/MD5 checksum: 54232 3f23cc38f68bbf926b801b82b3fea917
http://security.debian.org/pool/updates/main/a/apr-util/libaprutil1_1.2.12+dfsg-8+lenny4_amd64.deb
Size/MD5 checksum: 80046 f6158018f26ddd6369687b8f9f64aa75
http://security.debian.org/pool/updates/main/a/apr/libapr1_1.2.12-5+lenny1_amd64.deb
Size/MD5 checksum: 114326 851cc08504589c09f08ec9e6efa52ef1
http://security.debian.org/pool/updates/main/a/apr-util/libaprutil1-dbg_1.2.12+dfsg-8+lenny4_amd64.deb
Size/MD5 checksum: 147928 136a5a5c0d558d8f252d1ed44efed217
http://security.debian.org/pool/updates/main/a/apr-util/libaprutil1-dev_1.2.12+dfsg-8+lenny4_amd64.deb
Size/MD5 checksum: 133850 6b71ac477650c688863ef33fc58216a0
http://security.debian.org/pool/updates/main/a/apr/libapr1-dev_1.2.12-5+lenny1_amd64.deb
Size/MD5 checksum: 825740 bf80dbc726c5b691b023e96e463ba88c

arm architecture (ARM)

http://security.debian.org/pool/updates/main/a/apr/libapr1-dev_1.2.12-5+lenny1_arm.deb
Size/MD5 checksum: 818438 8e6c8a9964650a793e4a0e5ec51a8619
http://security.debian.org/pool/updates/main/a/apr/libapr1-dbg_1.2.12-5+lenny1_arm.deb
Size/MD5 checksum: 54912 a853d8175d2bee56c6f37aada02fc2ca
http://security.debian.org/pool/updates/main/a/apr/libapr1_1.2.12-5+lenny1_arm.deb
Size/MD5 checksum: 107790 85e0815ff8f340d99052a9c9f604cccd
http://security.debian.org/pool/updates/main/a/apr-util/libaprutil1_1.2.12+dfsg-8+lenny4_arm.deb
Size/MD5 checksum: 71112 20a4c9fd130c188166c0ebc6ceff5fcf
http://security.debian.org/pool/updates/main/a/apr-util/libaprutil1-dbg_1.2.12+dfsg-8+lenny4_arm.deb
Size/MD5 checksum: 138982 c84f95cff9713ed403fae7b712456ade
http://security.debian.org/pool/updates/main/a/apr-util/libaprutil1-dev_1.2.12+dfsg-8+lenny4_arm.deb
Size/MD5 checksum: 124090 c4fc3663255a416725a69818e3523731

armel architecture (ARM EABI)

http://security.debian.org/pool/updates/main/a/apr/libapr1_1.2.12-5+lenny1_armel.deb
Size/MD5 checksum: 109676 e26ebffcc101ffc87963c9a65b3543f6
http://security.debian.org/pool/updates/main/a/apr-util/libaprutil1-dev_1.2.12+dfsg-8+lenny4_armel.deb
Size/MD5 checksum: 124626 4c34337eb3d1d55900a067f2c8412abc
http://security.debian.org/pool/updates/main/a/apr/libapr1-dev_1.2.12-5+lenny1_armel.deb
Size/MD5 checksum: 821990 19c68f5f904bb3bbdfd44349f8544e83
http://security.debian.org/pool/updates/main/a/apr/libapr1-dbg_1.2.12-5+lenny1_armel.deb
Size/MD5 checksum: 55820 f39b0928bc4b91fb60bd6259c6ae6e02
http://security.debian.org/pool/updates/main/a/apr-util/libaprutil1_1.2.12+dfsg-8+lenny4_armel.deb
Size/MD5 checksum: 70086 1d3032e0879ed1ea6fa2f04c34af1782
http://security.debian.org/pool/updates/main/a/apr-util/libaprutil1-dbg_1.2.12+dfsg-8+lenny4_armel.deb
Size/MD5 checksum: 139434 e802e42577998c62fadfc335edb3b81a

hppa architecture (HP PA RISC)

http://security.debian.org/pool/updates/main/a/apr-util/libaprutil1_1.2.12+dfsg-8+lenny4_hppa.deb
Size/MD5 checksum: 83668 3c8893214d7375303eaf1eec6e27212b
http://security.debian.org/pool/updates/main/a/apr/libapr1-dev_1.2.12-5+lenny1_hppa.deb
Size/MD5 checksum: 827762 2fd0d8dd54c92c828e42100bb8816b00
http://security.debian.org/pool/updates/main/a/apr-util/libaprutil1-dbg_1.2.12+dfsg-8+lenny4_hppa.deb
Size/MD5 checksum: 142916 14e1e2f8fa50b0eb1772f1e4bbc26e50
http://security.debian.org/pool/updates/main/a/apr-util/libaprutil1-dev_1.2.12+dfsg-8+lenny4_hppa.deb
Size/MD5 checksum: 140872 7fef63f2cd282e44c51b5e69d94d8706
http://security.debian.org/pool/updates/main/a/apr/libapr1_1.2.12-5+lenny1_hppa.deb
Size/MD5 checksum: 113954 926b8c39fee1787a94b3d6cc1c6d420b
http://security.debian.org/pool/updates/main/a/apr/libapr1-dbg_1.2.12-5+lenny1_hppa.deb
Size/MD5 checksum: 54332 18751dc2275828a126b2dbe568678f32

i386 architecture (Intel ia32)

http://security.debian.org/pool/updates/main/a/apr-util/libaprutil1_1.2.12+dfsg-8+lenny4_i386.deb
Size/MD5 checksum: 73814 2ef03972ed5b2232fe5782c4960bc362
http://security.debian.org/pool/updates/main/a/apr/libapr1-dbg_1.2.12-5+lenny1_i386.deb
Size/MD5 checksum: 54582 edc98ca59cebd14195602929def1da31
http://security.debian.org/pool/updates/main/a/apr-util/libaprutil1-dbg_1.2.12+dfsg-8+lenny4_i386.deb
Size/MD5 checksum: 141438 5a54e1cac30640ca5e9922586d9983a8
http://security.debian.org/pool/updates/main/a/apr/libapr1_1.2.12-5+lenny1_i386.deb
Size/MD5 checksum: 108882 075f37cd43e483d27ff0b94ad01f2d08
http://security.debian.org/pool/updates/main/a/apr-util/libaprutil1-dev_1.2.12+dfsg-8+lenny4_i386.deb
Size/MD5 checksum: 121138 fc2411e049936d12702713c82377c9e5
http://security.debian.org/pool/updates/main/a/apr/libapr1-dev_1.2.12-5+lenny1_i386.deb
Size/MD5 checksum: 809460 a5648e0404f1cb4244c156cf85bfe0f5

ia64 architecture (Intel ia64)

http://security.debian.org/pool/updates/main/a/apr-util/libaprutil1-dbg_1.2.12+dfsg-8+lenny4_ia64.deb
Size/MD5 checksum: 135404 8f7a4964b22e5e9e5297380c15d8818d
http://security.debian.org/pool/updates/main/a/apr-util/libaprutil1-dev_1.2.12+dfsg-8+lenny4_ia64.deb
Size/MD5 checksum: 170110 412b51e1e3c1ed4e309459dd17844e68
http://security.debian.org/pool/updates/main/a/apr/libapr1_1.2.12-5+lenny1_ia64.deb
Size/MD5 checksum: 154362 2fc1441f28ef4f90446464627c8ef36d
http://security.debian.org/pool/updates/main/a/apr/libapr1-dev_1.2.12-5+lenny1_ia64.deb
Size/MD5 checksum: 837496 6862607faf59e42525f5205d8a967818
http://security.debian.org/pool/updates/main/a/apr-util/libaprutil1_1.2.12+dfsg-8+lenny4_ia64.deb
Size/MD5 checksum: 111140 12f0bf9e6264cc9c170c2b8365428cc0
http://security.debian.org/pool/updates/main/a/apr/libapr1-dbg_1.2.12-5+lenny1_ia64.deb
Size/MD5 checksum: 53428 a6a55d644fb58a0f7ea6a9b509cb71d0

mips architecture (MIPS (Big Endian))

http://security.debian.org/pool/updates/main/a/apr/libapr1_1.2.12-5+lenny1_mips.deb
Size/MD5 checksum: 110932 feb666e4f402bcb1954bc194c37496d7
http://security.debian.org/pool/updates/main/a/apr-util/libaprutil1-dbg_1.2.12+dfsg-8+lenny4_mips.deb
Size/MD5 checksum: 147482 e2508cc75520518ccbe4c3a5cf0cc50c
http://security.debian.org/pool/updates/main/a/apr/libapr1-dbg_1.2.12-5+lenny1_mips.deb
Size/MD5 checksum: 56582 5134a012017e629239cc543fedf4edf3
http://security.debian.org/pool/updates/main/a/apr-util/libaprutil1_1.2.12+dfsg-8+lenny4_mips.deb
Size/MD5 checksum: 74584 2fbb1b76079126fd701f32e45a9cf7f0
http://security.debian.org/pool/updates/main/a/apr/libapr1-dev_1.2.12-5+lenny1_mips.deb
Size/MD5 checksum: 792650 126585d9fe0def77f7632f9d098eb11d
http://security.debian.org/pool/updates/main/a/apr-util/libaprutil1-dev_1.2.12+dfsg-8+lenny4_mips.deb
Size/MD5 checksum: 136438 ae62dc1d5a32fac11615f4b67cfa4a6b

mipsel architecture (MIPS (Little Endian))

http://security.debian.org/pool/updates/main/a/apr/libapr1-dbg_1.2.12-5+lenny1_mipsel.deb
Size/MD5 checksum: 56414 ecca7e3643ccb91fc962b886bdddbc0e
http://security.debian.org/pool/updates/main/a/apr-util/libaprutil1-dev_1.2.12+dfsg-8+lenny4_mipsel.deb
Size/MD5 checksum: 136390 d45f956c14ea9fe22b77bce3810c32b7
http://security.debian.org/pool/updates/main/a/apr-util/libaprutil1-dbg_1.2.12+dfsg-8+lenny4_mipsel.deb
Size/MD5 checksum: 144740 05411f88615592531468cdd89bb4b5d0
http://security.debian.org/pool/updates/main/a/apr-util/libaprutil1_1.2.12+dfsg-8+lenny4_mipsel.deb
Size/MD5 checksum: 74366 a15e15331a62f33d33481b7e53f07b48
http://security.debian.org/pool/updates/main/a/apr/libapr1-dev_1.2.12-5+lenny1_mipsel.deb
Size/MD5 checksum: 792762 dc1e4748e106c82e9f8bf6c3ecce4a38
http://security.debian.org/pool/updates/main/a/apr/libapr1_1.2.12-5+lenny1_mipsel.deb
Size/MD5 checksum: 110974 a5dd28b5c9b3106da8e4c81abea6777d

powerpc architecture (PowerPC)

http://security.debian.org/pool/updates/main/a/apr-util/libaprutil1_1.2.12+dfsg-8+lenny4_powerpc.deb
Size/MD5 checksum: 82512 f8a18fb94a4ef3cabec01c288a26eef5
http://security.debian.org/pool/updates/main/a/apr/libapr1-dbg_1.2.12-5+lenny1_powerpc.deb
Size/MD5 checksum: 55708 555d64273f15c6ebd503b7cb84f0fb29
http://security.debian.org/pool/updates/main/a/apr-util/libaprutil1-dev_1.2.12+dfsg-8+lenny4_powerpc.deb
Size/MD5 checksum: 132338 66e77820b5b9d2a05d6df5c4ec2c76b0
http://security.debian.org/pool/updates/main/a/apr/libapr1_1.2.12-5+lenny1_powerpc.deb
Size/MD5 checksum: 116238 1a291989c32ea21ac8eef9ca51831fc5
http://security.debian.org/pool/updates/main/a/apr-util/libaprutil1-dbg_1.2.12+dfsg-8+lenny4_powerpc.deb
Size/MD5 checksum: 147180 cc9f274b349dbbb9ce9b69b0d0edf493
http://security.debian.org/pool/updates/main/a/apr/libapr1-dev_1.2.12-5+lenny1_powerpc.deb
Size/MD5 checksum: 821948 fc3acf3dec16223caf6f932e8b7c0c01

s390 architecture (IBM S/390)

http://security.debian.org/pool/updates/main/a/apr/libapr1_1.2.12-5+lenny1_s390.deb
Size/MD5 checksum: 126058 474bddd0f3c5a69cc21fc2d403fe90f6
http://security.debian.org/pool/updates/main/a/apr-util/libaprutil1-dbg_1.2.12+dfsg-8+lenny4_s390.deb
Size/MD5 checksum: 148614 89cc7bb2619f28e5e6e9d0042050a924
http://security.debian.org/pool/updates/main/a/apr-util/libaprutil1-dev_1.2.12+dfsg-8+lenny4_s390.deb
Size/MD5 checksum: 133044 fb35625937e6fae551d97df283a32dd9
http://security.debian.org/pool/updates/main/a/apr/libapr1-dev_1.2.12-5+lenny1_s390.deb
Size/MD5 checksum: 787872 2dc32425bfbd17b841218064599d80ed
http://security.debian.org/pool/updates/main/a/apr-util/libaprutil1_1.2.12+dfsg-8+lenny4_s390.deb
Size/MD5 checksum: 85496 c41f2fdebd22ec066815211768dcdc3a
http://security.debian.org/pool/updates/main/a/apr/libapr1-dbg_1.2.12-5+lenny1_s390.deb
Size/MD5 checksum: 54414 c36fa2538d8077a8ef09842e07bd989a

sparc architecture (Sun SPARC/UltraSPARC)

http://security.debian.org/pool/updates/main/a/apr/libapr1-dev_1.2.12-5+lenny1_sparc.deb
Size/MD5 checksum: 814624 613a70f3443404f5939e91e229d01d25
http://security.debian.org/pool/updates/main/a/apr/libapr1-dbg_1.2.12-5+lenny1_sparc.deb
Size/MD5 checksum: 54370 4c12839718c73a2b96b607d77fcbc583
http://security.debian.org/pool/updates/main/a/apr-util/libaprutil1-dbg_1.2.12+dfsg-8+lenny4_sparc.deb
Size/MD5 checksum: 131706 5c2ad3da38aaaab8ac2c14656602c532
http://security.debian.org/pool/updates/main/a/apr/libapr1_1.2.12-5+lenny1_sparc.deb
Size/MD5 checksum: 108712 c1f66be9c2daa447d5bfbd1f7639aada
http://security.debian.org/pool/updates/main/a/apr-util/libaprutil1_1.2.12+dfsg-8+lenny4_sparc.deb
Size/MD5 checksum: 72738 ec558ed4277ca676f07e3181ffad0335
http://security.debian.org/pool/updates/main/a/apr-util/libaprutil1-dev_1.2.12+dfsg-8+lenny4_sparc.deb
Size/MD5 checksum: 124976 22385c13d934c3877ce2f9eeaa4584e3

These files will probably be moved into the stable distribution on
its next update.

---

For apt-get: deb http://security.debian.org/ stable/updates main
For dpkg-ftp: ftp://security.debian.org/debian-security dists/stable/updates/main
Mailing list: [email protected]
Package info: `apt-cache show <pkg>' and http://packages.debian.org/&lt;pkg&gt;