FlawAtlas
Search the atlas
SUSE-SU-2022:4005-1 Not scored

Security update for php8

This update for php8 fixes the following issues: - CVE-2022-37454: Fixed buffer overflow in hash_update() on long parameter (bug#81738) (bsc#1204577). - CVE-2022-31630: Fixed OOB read due to insufficient input validation in imageloadfont() (bug#81739) (bsc#1204979). - version update to 8.0.25 (27 Oct 2022) * Session: Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method). * Streams: Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).

Exploit probability Not scored
Published November 15, 2022
Required by Not available
Last source change May 2, 2025

02 / AFFECTED SOFTWARE

Affected packages

SUSE:Linux Enterprise Module for Web and Scripting 15 SP4 apache2-mod_php8
SUSE:Linux Enterprise Module for Web and Scripting 15 SP4 php8
SUSE:Linux Enterprise Module for Web and Scripting 15 SP4 php8-embed
SUSE:Linux Enterprise Module for Web and Scripting 15 SP4 php8-fastcgi
SUSE:Linux Enterprise Module for Web and Scripting 15 SP4 php8-fpm
SUSE:Linux Enterprise Module for Web and Scripting 15 SP4 php8-test
openSUSE:Leap 15.4 apache2-mod_php8
openSUSE:Leap 15.4 php8
openSUSE:Leap 15.4 php8-embed
openSUSE:Leap 15.4 php8-fastcgi
openSUSE:Leap 15.4 php8-fpm
openSUSE:Leap 15.4 php8-test

03 / CONNECTIONS

Connected vulnerabilities

04 / EVIDENCE

Source records

Open Source Vulnerabilities SUSE-SU-2022:4005-1

This update for php8 fixes the following issues: - CVE-2022-37454: Fixed buffer overflow in hash_update() on long parameter (bug#81738) (bsc#1204577). - CVE-2022-31630: Fixed OOB read due to insufficient input validation in imageloadfont() (bug#81739) (bsc#1204979). - version update to 8.0.25 (27 Oct 2022) * Session: Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method). * Streams: Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).

View original source

05 / REFERENCES

Further evidence