{"id":"MGASA-2022-0406","aliases":[],"status":"published","title":"Updated php packages fix security vulnerability","description":"GD - Fixed bug #81739: OOB read due to insufficient input validation in\nimageloadfont().\nHash - Fixed bug #81738: buffer overflow in hash_update() on long\nparameter.\nSession - Fixed bug GH-9583 (session_create_id() fails with user defined\nsave handler that doesn't have a validateId() method).\nStreams - Fixed bug GH-9590 (stream_select does not abort upon exception\nor empty valid fd set)","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2022-11-01T22:58:59Z","modified":"2026-04-16T04:22:55Z","fixes":[{"ecosystem":"Mageia:8","package":"php","fixed_in":["8.0.25-1.mga8"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Mageia:8","package":"php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.25-1.mga8"}]}]}],"references":[{"url":"https://advisories.mageia.org/MGASA-2022-0406.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=31041","tags":["report"]},{"url":"https://www.php.net/ChangeLog-8.php#8.0.25","tags":["web"]}],"sources":{"osv":[{"id":"MGASA-2022-0406","title":"Updated php packages fix security vulnerability","description":"GD - Fixed bug #81739: OOB read due to insufficient input validation in\nimageloadfont().\nHash - Fixed bug #81738: buffer overflow in hash_update() on long\nparameter.\nSession - Fixed bug GH-9583 (session_create_id() fails with user defined\nsave handler that doesn't have a validateId() method).\nStreams - Fixed bug GH-9590 (stream_select does not abort upon exception\nor empty valid fd set)\n","status":"published","published":"2022-11-01T22:58:59Z","modified":"2026-04-16T04:22:55.065172Z","updated_at":"2026-11-02T15:49:42.263076Z"}]}}