This bug was fixed in the package php5 - 5.3.10-1ubuntu3.5 --------------- php5 (5.3.10-1ubuntu3.5) precise-security; urgency=low
* SECURITY UPDATE: arbitrary memory disclosure (LP: #1099793) - debian/patches/CVE-2012-6113.patch: properly initialize length in ext/openssl/openssl.c. - CVE-2012-6113 -- Marc Deslauriers <marc.deslauri...@ubuntu.com> Fri, 18 Jan 2013 09:49:22 -0500 ** Changed in: php5 (Ubuntu Precise) Status: Confirmed => Fix Released -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1099793 Title: php 5.3.10 openssl_encrypt empty data To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/php5/+bug/1099793/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs