MGASA-2021-0442
Updated php packages fix security vulnerabilities
No scoreFix available
Updated php packages fix security vulnerabilities:
- Integer overflow in mysqli_real_escape_string()
- Symlinks are followed when creating PHAR archive
- shmop can't read beyond 2147483647 bytes
- Integer overflow on substr_replace
- Heap buffer overflow via str_repeat
- Integer Overflow when concatenating strings
- segfault with preloading and statically bound closure
- shmop_open won't attach and causes php to crash
- Heap Overflow in msg_send
- ZipArchive::extractTo extracts outside of destination
What each source reports
OSVNo score
Updated php packages fix security vulnerabilities
Updated php packages fix security vulnerabilities:
- Integer overflow in mysqli_real_escape_string()
- Symlinks are followed when creating PHAR archive
- shmop can't read beyond 2147483647 bytes
- Integer overflow on substr_replace
- Heap buffer overflow via str_repeat
- Integer Overflow when concatenating strings
- segfault with preloading and statically bound closure
- shmop_open won't attach and causes php to crash
- Heap Overflow in msg_send
- ZipArchive::extractTo extracts outside of destination
- Record
MGASA-2021-0442- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
phpMageia:8 | before 8.0.11-1.mga8 | 8.0.11-1.mga8 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
MGASA-2021-0442 is a vulnerability with no CVSS score yet in php, published September 29, 2021. No source lists public exploit code. Fixed in php 8.0.11-1.mga8.