MGASA-2022-0406
Updated php packages fix security vulnerability
GD - Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). Hash - Fixed bug #81738: buffer overflow in hash_update() on long parameter. Session - Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method). Streams - Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set)
What each source reports
OSV No score
Updated php packages fix security vulnerability
GD - Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). Hash - Fixed bug #81738: buffer overflow in hash_update() on long parameter. Session - Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method). Streams - Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set)
- Record
MGASA-2022-0406- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
phpMageia:8 |
before 8.0.25-1.mga8 | 8.0.25-1.mga8 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
MGASA-2022-0406 is a vulnerability with no CVSS score yet in php, published November 1, 2022. No source lists public exploit code. Fixed in php 8.0.25-1.mga8.