========================================================================== Ubuntu Security Notice USN-1702-1 January 22, 2013 php5 vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 12.04 LTS Summary: PHP could be made to expose sensitive information over the network. Software Description: - php5: HTML-embedded scripting language interpreter Details: It was discovered that PHP incorrectly handled the openssl_encrypt function when used with an empty string. An attacker could use this flaw to cause PHP to disclose arbitrary memory contents and possibly expose sensitive information. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 12.04 LTS: php5 5.3.10-1ubuntu3.5 In general, a standard system update will make all the necessary changes. References: http://www.ubuntu.com/usn/usn-1702-1 CVE-2012-6113 Package Information: https://launchpad.net/ubuntu/+source/php5/5.3.10-1ubuntu3.5
By subscribing to our early morning news update, you will receive a daily digest of the latest security news published on Help Net Security.
With over 500 issues so far, reading our newsletter every Monday morning will keep you up-to-date with security risks out there.