php:8.2 security update
エラータID: AXSA:2026-2126:01
リリース日:
2026/10/23 Friday - 18:22
題名:
php:8.2 security update
影響のあるチャネル:
MIRACLE LINUX 9 for x86_64
Severity:
High
Description:
以下項目について対処しました。
[Security Fix]
- PHP のメモリ制限処理には、メモリ領域の解放後利用の問題があるため、
リモートの攻撃者により、巧妙に細工された HTTP リクエストを介して、
任意のコードの実行を可能とする脆弱性が存在します。(CVE-2026-109618)
- PHP のエラー処理、およびワーカープロセスの状態管理には、メモリ領域
の解放後利用の問題があるため、リモートの攻撃者により、任意のコードの
実行を可能とする脆弱性が存在します。(CVE-2026-109619)
Modularity name: php
Stream name: 8.2
解決策:
パッケージをアップデートしてください。
CVE:
CVE-2026-109618
PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The subsequent request cleanup procedure may read or branch on this memory. Multiple OOM strategies can consistently trigger this condition and lead to remote code execution (RCE).
PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The subsequent request cleanup procedure may read or branch on this memory. Multiple OOM strategies can consistently trigger this condition and lead to remote code execution (RCE).
CVE-2026-109619
PHP has various global state that temporarily points into request memory. In some scenarios, global state may not be correctly reset, or may be repopulated after being reset. The global state may then refer to request memory even after it has been freed. Subsequent requests may read or branch on this stale state before it is fully initialized. Multiple strategies can trigger this condition and produce remote code execution (RCE).
PHP has various global state that temporarily points into request memory. In some scenarios, global state may not be correctly reset, or may be repopulated after being reset. The global state may then refer to request memory even after it has been freed. Subsequent requests may read or branch on this stale state before it is fully initialized. Multiple strategies can trigger this condition and produce remote code execution (RCE).
追加情報:
N/A
ダウンロード:
SRPMS
- php-pecl-apcu-5.1.23-1.module+el9+1208+8f793006.src.rpm
MD5: ac2b63fec9a42d1bac8c4d8d898ff596
SHA-256: a38a77817e92787f0e4ebb88766d3f635d96c449d5b762f25f3375e5b6dda597
Size: 101.79 kB - php-pecl-rrd-2.0.3-4.module+el9+1208+8f793006.src.rpm
MD5: 5a4416c6645b4273a705ea5e6e696704
SHA-256: caa76b0a6622b94328262437660c27433252988f798a4e95fbad4b878684ecce
Size: 29.67 kB - php-pecl-xdebug3-3.2.2-2.module+el9+1208+8f793006.src.rpm
MD5: 7be77b9095966f255ec783086f4eab00
SHA-256: a83aaa28e2943c45affbaf4fe806d84f958f0dc101c15cf289dbd44cc64685c5
Size: 453.33 kB - php-pecl-zip-1.22.3-1.module+el9+1208+8f793006.src.rpm
MD5: 1b4556e7d27d15adc7435d40a8866a93
SHA-256: df38d42f6e7b37d4f357102a4dd89ba0b378f92361b6ea1fefc72cfd3efe5c85
Size: 365.30 kB - php-8.2.33-1.module+el9+1208+8f793006.ML.1.src.rpm
MD5: a8d9eae4813fa985319c9821dc90f049
SHA-256: aec1b7d52ef66df85c9a09b45ae7bbade5f8713d372c036f61ead4c0988ef255
Size: 11.88 MB
Asianux Server 9 for x86_64
- apcu-panel-5.1.23-1.module+el9+1208+8f793006.noarch.rpm
MD5: 5f895482ae1bad196ca24e176f1aa94f
SHA-256: ac0e834c29b14fb1d4821b1fe0a6d8f2b4f4e46c14c44b4029cbaac6de30538b
Size: 18.21 kB - php-8.2.33-1.module+el9+1208+8f793006.ML.1.x86_64.rpm
MD5: 74505bec6c26bfdc47c2ae34b5bcba6e
SHA-256: 9b072216bfe693e2c9cb2efd41af76714c2dc9596063ef552eb35e489419e83b
Size: 7.71 kB - php-bcmath-8.2.33-1.module+el9+1208+8f793006.ML.1.x86_64.rpm
MD5: fbea04a7d6dcfff7208f3cd1ad0610d8
SHA-256: f9bc3ce27ce57fbebb18f4a76f2e23ecc0f4a7af727d0750e1263a6ad6985cb6
Size: 32.73 kB - php-cli-8.2.33-1.module+el9+1208+8f793006.ML.1.x86_64.rpm
MD5: 7b8c87314b29513a11b846b3cd3cb363
SHA-256: a344728c41641b4bb515318d195bc31c39ab368e168378fdc765c8df4e32f02e
Size: 3.60 MB - php-common-8.2.33-1.module+el9+1208+8f793006.ML.1.x86_64.rpm
MD5: a3cc8477a5f7288ae8feb266a7fd871a
SHA-256: f6ee298f3628a7d3605ad2382f0be23553d2da0d0e6078c6a8f8ddc9995d8614
Size: 722.00 kB - php-dba-8.2.33-1.module+el9+1208+8f793006.ML.1.x86_64.rpm
MD5: 4299cce47d4b1141e3e5b39f496ccf0a
SHA-256: 5cad2e3202071dedd976217b1820f28f689db88d9c2a025bcae2ea503e509427
Size: 31.91 kB - php-dbg-8.2.33-1.module+el9+1208+8f793006.ML.1.x86_64.rpm
MD5: 8d99608d70bf6cabf31fc69c8c47246a
SHA-256: 0a7b8bc8bc5825ee11b01c80f90fd0c54dffccc5655027629f173ec13f45b52d
Size: 1.86 MB - php-debugsource-8.2.33-1.module+el9+1208+8f793006.ML.1.x86_64.rpm
MD5: 4e7c671cfd38e890a8febad1bb1db7ee
SHA-256: ec777e53b6738e3434409c57aa55f73faeb194782aa4adbbdcf23ba34f9cfae8
Size: 4.29 MB - php-devel-8.2.33-1.module+el9+1208+8f793006.ML.1.x86_64.rpm
MD5: d8229fd6179c1dcefb9f0866a612ba46
SHA-256: be0c90cb34e8ebe1aabc6bbe254ff0cbcaddfe56a4feaa68b49a601b5bffa643
Size: 776.27 kB - php-embedded-8.2.33-1.module+el9+1208+8f793006.ML.1.x86_64.rpm
MD5: fa3f95bb84b966970311fe883a9764be
SHA-256: 67f1ac24a483f3e770f6a2c4da337c828b80f9813aebf7e301ed2a121e1f4fc4
Size: 1.77 MB - php-enchant-8.2.33-1.module+el9+1208+8f793006.ML.1.x86_64.rpm
MD5: f144f667e5ee4072e6468ad06ac154fc
SHA-256: 322676ce462c9b6e27c6ea75972141136ce48fd5e1998a22fa8051487e425d3c
Size: 17.25 kB - php-ffi-8.2.33-1.module+el9+1208+8f793006.ML.1.x86_64.rpm
MD5: d128a6256753e8640a359b3b1283df8a
SHA-256: f6e999ee0031a61f8a26d54c3e24439620a1dc45597de644a976fea9592fbe7a
Size: 77.09 kB - php-fpm-8.2.33-1.module+el9+1208+8f793006.ML.1.x86_64.rpm
MD5: 3f26b673e2cba043e8956fd04ba3e5ae
SHA-256: 65c29b3a7d6da75d55f2a2bd9d9287c8f9ce605845ecde5c6484db828421b138
Size: 1.86 MB - php-gd-8.2.33-1.module+el9+1208+8f793006.ML.1.x86_64.rpm
MD5: e1ab99084116fa396b62ebdd51f8d8e6
SHA-256: e7cb301d903ea76e73a2951a94235df3a690ee6ccc564864ddbc4abacf327151
Size: 39.99 kB - php-gmp-8.2.33-1.module+el9+1208+8f793006.ML.1.x86_64.rpm
MD5: ee54e5db955e98204fd2b325d769a7fd
SHA-256: 07fb7fcd9d09642ad9855776fae7fb460d46bc153dc2e2065c46eab4014aa99b
Size: 30.41 kB - php-intl-8.2.33-1.module+el9+1208+8f793006.ML.1.x86_64.rpm
MD5: 5d9608b931b16d1547db8be2c579146a
SHA-256: 839e40ec88901f79e44650fb17b90d93ca57581a9625910e3038fbc0f84cc8c4
Size: 165.11 kB - php-ldap-8.2.33-1.module+el9+1208+8f793006.ML.1.x86_64.rpm
MD5: 8411a39c5272eb72b5f534650a7ca2a4
SHA-256: f27e36a4780e92169855b2bb496d3e5750974cd6c011dfee6b420d443f4a8c9d
Size: 41.14 kB - php-mbstring-8.2.33-1.module+el9+1208+8f793006.ML.1.x86_64.rpm
MD5: 7efa4bd04ce8bc0892cf21fa34979c8d
SHA-256: b2212a78d9ff01eebbdde9ce695133814dff5d79796efed82a571dbf462a2a25
Size: 519.62 kB - php-mysqlnd-8.2.33-1.module+el9+1208+8f793006.ML.1.x86_64.rpm
MD5: 23d79809aede38d10f6e5aea08c2263e
SHA-256: 4824ea3fff4e476df55b2ea3230d31b6c5d88da970e929e84582b3af5f93084e
Size: 144.02 kB - php-odbc-8.2.33-1.module+el9+1208+8f793006.ML.1.x86_64.rpm
MD5: f7691d21f230a2ea4d9db6e315e87a3d
SHA-256: 4daee2f8944a7a71f33bec8f04d6c87697cc932138c0484f7cce178bf1a93f19
Size: 45.29 kB - php-opcache-8.2.33-1.module+el9+1208+8f793006.ML.1.x86_64.rpm
MD5: 181b6a8e741d86593493c613b0849d05
SHA-256: 31c3b653c834029112b469f447886f23c20d9c48974156b86bb65aad3dfe0eae
Size: 375.68 kB - php-pdo-8.2.33-1.module+el9+1208+8f793006.ML.1.x86_64.rpm
MD5: 80e0c391be2b0760e4e10504de632d14
SHA-256: 7b7aee9f831843a47552863aa138e6c27f280d87da4b6ce6e7c46d58a9665d10
Size: 84.33 kB - php-pecl-apcu-5.1.23-1.module+el9+1208+8f793006.x86_64.rpm
MD5: 03d96afdf2f3cdf00bfe705ad0c6ccba
SHA-256: 5d11eeaec34d0e66a57248839a1239003a3f61f6256686a5ba2766f66d9257d5
Size: 59.39 kB - php-pecl-apcu-debugsource-5.1.23-1.module+el9+1208+8f793006.x86_64.rpm
MD5: 37f3bd9e46a162ec72a06dd2c1913622
SHA-256: f678097a9c5eed9284f38a2366b8e8317de114ea464e0c699c0b140be8d17b37
Size: 52.54 kB - php-pecl-apcu-devel-5.1.23-1.module+el9+1208+8f793006.x86_64.rpm
MD5: 87189cacfaa7d77cd7118963cee4b044
SHA-256: 04b6ecd436e89f2fbbebd703d8776065d6f13953518f004727cb65ca17131856
Size: 61.66 kB - php-pecl-rrd-2.0.3-4.module+el9+1208+8f793006.x86_64.rpm
MD5: 8396096def51cac355a559c84ec4e3f5
SHA-256: 0d33e7d41a23129c48c02fa42e85aa3f5ba5aaad15afae4e431266177a1e8165
Size: 26.62 kB - php-pecl-rrd-debugsource-2.0.3-4.module+el9+1208+8f793006.x86_64.rpm
MD5: 056325444a87556a03441749aa7e3dd7
SHA-256: 145dd2fed1a250857fd41d5f97b2a08e76b252adfc03c012ff5f26ad2b5d6aaf
Size: 17.68 kB - php-pecl-xdebug3-3.2.2-2.module+el9+1208+8f793006.x86_64.rpm
MD5: ea4769105668a39be028d18eb76747df
SHA-256: 2709c3701efce666f33da4228721d57e1a92d298fbd3c73333c8e22dbe2b45b2
Size: 200.45 kB - php-pecl-xdebug3-debugsource-3.2.2-2.module+el9+1208+8f793006.x86_64.rpm
MD5: 823ebee0ebea81dd67994d15cccc889d
SHA-256: c09c2d86bf726981a8e6bfba48d95c765dbecf6f52cb7a0414a4ef544fc378ee
Size: 156.85 kB - php-pecl-zip-1.22.3-1.module+el9+1208+8f793006.x86_64.rpm
MD5: c16854a7c71d69cc2939a482dd102cf4
SHA-256: 9cfbfe7c4ee09ebd2ccc5fa0e64a02a0e867bf3c61a5c290be470a5116d3f927
Size: 63.14 kB - php-pecl-zip-debugsource-1.22.3-1.module+el9+1208+8f793006.x86_64.rpm
MD5: 5dcb2742d8e90fb40ac3167008f87d7a
SHA-256: 936718c458a02bc4c4a40bdf86d9f82f088fbaacaeebc866f80cc58f65d31c12
Size: 30.79 kB - php-pgsql-8.2.33-1.module+el9+1208+8f793006.ML.1.x86_64.rpm
MD5: 39b04b0a525d69254afda6fe5ad30aaf
SHA-256: 0f9f2dbcc41c41f2bf2a610409281808d32db8ca6c37fe736f0e67f9c2ef54d1
Size: 73.55 kB - php-process-8.2.33-1.module+el9+1208+8f793006.ML.1.x86_64.rpm
MD5: 1fb8528dc982f6978ea09a93bc23619c
SHA-256: a3a55fe4807bbb72c2f2eb4071b8ecf1fdd3fb8c7d91d0520d5eb38bbde7d978
Size: 40.04 kB - php-snmp-8.2.33-1.module+el9+1208+8f793006.ML.1.x86_64.rpm
MD5: 14a60b427196fe6f7ca2043972c1f107
SHA-256: 94380662fa1058163eb1e7a16ca4bb67ab90caf38819874c41615d2235c1b75f
Size: 31.40 kB - php-soap-8.2.33-1.module+el9+1208+8f793006.ML.1.x86_64.rpm
MD5: 7529d0f6d4aec9feff6f79e551f9ef38
SHA-256: eada6f460b31d763ab9833d1a462c67c4214df27f69635c6b6e26c0c344522c6
Size: 140.29 kB - php-xml-8.2.33-1.module+el9+1208+8f793006.ML.1.x86_64.rpm
MD5: c3893a47f47609698530d75244d356b1
SHA-256: f2352f0837ff297a6cf21c716336058d4864215eb64e8fd820ac146a85add766
Size: 144.36 kB