php:8.1 security update
エラータID: AXSA:2026-2127:01
リリース日:
2026/10/23 Friday - 18:43
題名:
php:8.1 security update
影響のあるチャネル:
MIRACLE LINUX 9 for x86_64
Severity:
High
Description:
以下項目について対処しました。
[Security Fix]
- PHP のメモリ制限処理には、メモリ領域の解放後利用の問題があるため、
リモートの攻撃者により、巧妙に細工された HTTP リクエストを介して、
任意のコードの実行を可能とする脆弱性が存在します。(CVE-2026-109618)
- PHP のエラー処理、およびワーカープロセスの状態管理には、メモリ領域
の解放後利用の問題があるため、リモートの攻撃者により、任意のコードの
実行を可能とする脆弱性が存在します。(CVE-2026-109619)
Modularity name: php
Stream name: 8.1
解決策:
パッケージをアップデートしてください。
CVE:
CVE-2026-109618
PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The subsequent request cleanup procedure may read or branch on this memory. Multiple OOM strategies can consistently trigger this condition and lead to remote code execution (RCE).
PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The subsequent request cleanup procedure may read or branch on this memory. Multiple OOM strategies can consistently trigger this condition and lead to remote code execution (RCE).
CVE-2026-109619
PHP has various global state that temporarily points into request memory. In some scenarios, global state may not be correctly reset, or may be repopulated after being reset. The global state may then refer to request memory even after it has been freed. Subsequent requests may read or branch on this stale state before it is fully initialized. Multiple strategies can trigger this condition and produce remote code execution (RCE).
PHP has various global state that temporarily points into request memory. In some scenarios, global state may not be correctly reset, or may be repopulated after being reset. The global state may then refer to request memory even after it has been freed. Subsequent requests may read or branch on this stale state before it is fully initialized. Multiple strategies can trigger this condition and produce remote code execution (RCE).
追加情報:
N/A
ダウンロード:
SRPMS
- php-pecl-apcu-5.1.21-1.module+el9+1207+c20e9810.src.rpm
MD5: fbed19bbb888d88dee6d533092a974c4
SHA-256: 57806cfa3a04d1f7221475ce92940459ec1ff15250542b56a7724383025dff98
Size: 102.56 kB - php-pecl-rrd-2.0.3-4.module+el9+1207+c20e9810.src.rpm
MD5: 2a02d7dded21ee657e8e11d571291172
SHA-256: 0ee4b5adcaa8492e6fa1bca1bb85900d81febca640f9b2451b65146125875acc
Size: 29.67 kB - php-pecl-xdebug3-3.1.4-1.module+el9+1207+c20e9810.src.rpm
MD5: 470f1acfa01eb81381f43cfc7f6564ae
SHA-256: 24ecac3dd9b7c400de560afd2290b144c0f8f38422e3b694dc79c38322797c70
Size: 434.61 kB - php-pecl-zip-1.20.1-1.module+el9+1207+c20e9810.src.rpm
MD5: c487c684b0e5221d47ea7630176be754
SHA-256: 2a3b2b020b39ef39bd488293ba0c0c7834a4a79ed0381adc3afa048363ef0e1a
Size: 353.14 kB - php-8.1.32-1.module+el9+1207+c20e9810.ML.1.src.rpm
MD5: b0e005dc07e090c30c47141147ce8f29
SHA-256: 825ccbf45bd5e44c408f894ef349ad791de80f617eab0471e2288603908ad82b
Size: 11.47 MB
Asianux Server 9 for x86_64
- apcu-panel-5.1.21-1.module+el9+1207+c20e9810.noarch.rpm
MD5: 875755569e3550bc2dd4ddc01dae7668
SHA-256: 644713bcf3f4569bf99f14913d483a91c017172dfcbb8f8867dd12ec082c5c11
Size: 18.69 kB - php-8.1.32-1.module+el9+1207+c20e9810.ML.1.x86_64.rpm
MD5: adc0a4b5f11519e3aad3a959f6ab859b
SHA-256: b617c3e181c73004c3539a76a361b9fba3a24eabda861d9c8370669ea2168126
Size: 7.43 kB - php-bcmath-8.1.32-1.module+el9+1207+c20e9810.ML.1.x86_64.rpm
MD5: c5529959041b35a2fc5aabcf7f0021ce
SHA-256: 979ede96f4ceed63d326c1467194abf6d1eca958977c4b5c37582b23f4fdccf2
Size: 32.52 kB - php-cli-8.1.32-1.module+el9+1207+c20e9810.ML.1.x86_64.rpm
MD5: 9f65883aac4b22343a7d128f2f0ca2c4
SHA-256: 119a9f690fa037ae75bf1a1a29d98ad996ee31b2218ebd830eea1ddc79181619
Size: 3.48 MB - php-common-8.1.32-1.module+el9+1207+c20e9810.ML.1.x86_64.rpm
MD5: 67b61758cc2c0e453bac959517ae368a
SHA-256: 531d1c067a9f0f53e9819b07fb4bd38d6d0d41c08470258d077bfb14c305f398
Size: 687.38 kB - php-dba-8.1.32-1.module+el9+1207+c20e9810.ML.1.x86_64.rpm
MD5: 7b3741e50608d66482e99810e1b547d7
SHA-256: b94599661020eb0f02b72fb23683ab40202fe3e75fe02b77a26b4e8324e43f22
Size: 31.44 kB - php-dbg-8.1.32-1.module+el9+1207+c20e9810.ML.1.x86_64.rpm
MD5: 5f5ebed4e312f19aef80442fd819361f
SHA-256: e0084cb6c0b0e03970e8be39e8ec2857551e5586bf994e8bf56fa284728a0db1
Size: 1.80 MB - php-debugsource-8.1.32-1.module+el9+1207+c20e9810.ML.1.x86_64.rpm
MD5: fbf69c6926d6ab043411b764993c388a
SHA-256: 74d83eda1767a9dbefeb37b96174aa5a71a611d1e244c5f33c463d56926838d5
Size: 4.17 MB - php-devel-8.1.32-1.module+el9+1207+c20e9810.ML.1.x86_64.rpm
MD5: 06c51e1625b79472280c832a014c5613
SHA-256: 677e4ca3d063dabd25a7fc2b89fe037a9ae8f890a9e971b77a1c57b19231e36b
Size: 751.57 kB - php-embedded-8.1.32-1.module+el9+1207+c20e9810.ML.1.x86_64.rpm
MD5: e6dab64e820b07b9c58fbda7f7ba202c
SHA-256: d562ae756bf3ec9ec33c810ce6f561a7861cf49761d9cf6db7d8fb2a01e5c65d
Size: 1.71 MB - php-enchant-8.1.32-1.module+el9+1207+c20e9810.ML.1.x86_64.rpm
MD5: 65fe8d0d221a32de2e170feb3512aa90
SHA-256: bb24e2391f629dd5bc280bef36938e82898587164c56471e3f2b03a2b7944565
Size: 16.98 kB - php-ffi-8.1.32-1.module+el9+1207+c20e9810.ML.1.x86_64.rpm
MD5: 70a5e48c864e43132625d9454990ec00
SHA-256: 85294e856c96fa960b63dbf34d7487df4c4330d18ca11c7b9d573a7175715b5a
Size: 74.92 kB - php-fpm-8.1.32-1.module+el9+1207+c20e9810.ML.1.x86_64.rpm
MD5: d9b77db7066c39ffbde967831a418b78
SHA-256: ac57522d19495173b60a92561d4840b3855127f62b66d374c4c3e1ea37559710
Size: 1.80 MB - php-gd-8.1.32-1.module+el9+1207+c20e9810.ML.1.x86_64.rpm
MD5: d7e69b32909f8a42ec44d40151178a61
SHA-256: dbb641d109af5a4363b0906d872625517a4ffec7b4edf6a6b51a62d2ce0cdec4
Size: 39.62 kB - php-gmp-8.1.32-1.module+el9+1207+c20e9810.ML.1.x86_64.rpm
MD5: 683d35302826f8e00370e3d46e945059
SHA-256: 62613c0d72981d6db8feba428a0fef6e31d3c22fc14f09fd55e5c6b125604dae
Size: 29.63 kB - php-intl-8.1.32-1.module+el9+1207+c20e9810.ML.1.x86_64.rpm
MD5: 93c37396e07c70fb39b2eeb808ee5502
SHA-256: b22bfd88c75be8ccda7cfe78400f6b900802889ba103c66c79156273f97f0a4b
Size: 150.50 kB - php-ldap-8.1.32-1.module+el9+1207+c20e9810.ML.1.x86_64.rpm
MD5: f31bf05a0f5c2087bd069ac9b28197ea
SHA-256: 11e57d9b4a1d1647f2f8a928a565ce33b2460fe3403c9e0a4f94cdc3924c787f
Size: 40.41 kB - php-mbstring-8.1.32-1.module+el9+1207+c20e9810.ML.1.x86_64.rpm
MD5: 823353f4bf7969f388de765d397a8185
SHA-256: 67dd31ba4dd1ed695fe362e92a9cda36a3354023c735ec9c22400f109c9e6713
Size: 470.52 kB - php-mysqlnd-8.1.32-1.module+el9+1207+c20e9810.ML.1.x86_64.rpm
MD5: a45fe90e76b80e51e61fbac0fd600eed
SHA-256: 8a50ae6139010cbad5f47feacdf08d021ef661f430d6e060c5422e857ef019cf
Size: 142.96 kB - php-odbc-8.1.32-1.module+el9+1207+c20e9810.ML.1.x86_64.rpm
MD5: e61337a1b48963517585538324fe1066
SHA-256: 5a80465f34042761ab7c142de9065b27536f83ab03394445506926e321559128
Size: 43.19 kB - php-opcache-8.1.32-1.module+el9+1207+c20e9810.ML.1.x86_64.rpm
MD5: 727d57a03b917ab2c281c93be5602d2f
SHA-256: 7f8d6a8a7b3131e44edaea5f8d8e158440895e46858aa37a8f23e734f65c5ab1
Size: 375.32 kB - php-pdo-8.1.32-1.module+el9+1207+c20e9810.ML.1.x86_64.rpm
MD5: b83c6c8e934d6ec02c693d94155a18b5
SHA-256: 01246e9de879ef01a3cd3bfc0be5e3f9a209b862dcd7cca3973713f539dc2365
Size: 80.87 kB - php-pecl-apcu-5.1.21-1.module+el9+1207+c20e9810.x86_64.rpm
MD5: 77f87cc44dc39804a566f376fa65d18a
SHA-256: 0c7e9db9b42962da0066f16aeba3c21cdbea57cbe0b85e84dd161a07f3412b52
Size: 58.06 kB - php-pecl-apcu-debugsource-5.1.21-1.module+el9+1207+c20e9810.x86_64.rpm
MD5: dc3e5016c37c106f8dce31ab34fcaa27
SHA-256: 64218c272054e565ea1d9633f1a2bbf54d5b317865f4f93a6fa159e43adfc08c
Size: 51.72 kB - php-pecl-apcu-devel-5.1.21-1.module+el9+1207+c20e9810.x86_64.rpm
MD5: 659a23cb1938f03fd69c6127e3a5503a
SHA-256: dcfe7305f9ca7e1dddc1b794393fc28d6b82d892ad341074e1c8351069322d6b
Size: 64.80 kB - php-pecl-rrd-2.0.3-4.module+el9+1207+c20e9810.x86_64.rpm
MD5: 7351fa8de774b722ef5e23cc70b4decd
SHA-256: f199439eeb21d1621cddfdf9b735c6cab0e630b19731c2fe7fd69183ed3b388a
Size: 26.46 kB - php-pecl-rrd-debugsource-2.0.3-4.module+el9+1207+c20e9810.x86_64.rpm
MD5: 276f826cf99cd1d85cc2c0ce42b51c86
SHA-256: 7de8db4e2eac126aa45c6517b6d5e086df8ae4ace0465b1061dd5260ae815419
Size: 17.68 kB - php-pecl-xdebug3-3.1.4-1.module+el9+1207+c20e9810.x86_64.rpm
MD5: ab11a31de210e9bf4fab3ba799dc86a4
SHA-256: a96f963db261203f392a75b9891e6b368d9553c9cacb65f0e7ae27996272be48
Size: 195.61 kB - php-pecl-xdebug3-debugsource-3.1.4-1.module+el9+1207+c20e9810.x86_64.rpm
MD5: 955c835f5f4e4878d93301119a2ea3d5
SHA-256: 0139a2dce3b8f3f0fc1306902301043e156fc16cf5808c7438fc81484a548dfa
Size: 154.97 kB - php-pecl-zip-1.20.1-1.module+el9+1207+c20e9810.x86_64.rpm
MD5: 1cf2f8a41bc07cfd005926d28ddda620
SHA-256: 9d5db5866a6b23060b9c6f6eddf166baf1a4f4b10dbb2af18b36302bcaad4086
Size: 61.10 kB - php-pecl-zip-debugsource-1.20.1-1.module+el9+1207+c20e9810.x86_64.rpm
MD5: 9e6efdc827f74e783b600f144d97cf6b
SHA-256: 7881ca20075b090c8e40295bee3688451b259c1007b3fc63375489c3b0fd59d7
Size: 27.98 kB - php-pgsql-8.1.32-1.module+el9+1207+c20e9810.ML.1.x86_64.rpm
MD5: 18b7444bc4fe845718358e66cc1abee5
SHA-256: ff4f54069ee2aa44275753df1b758a47f1feda83c38542ba04ec74c85c889563
Size: 72.59 kB - php-process-8.1.32-1.module+el9+1207+c20e9810.ML.1.x86_64.rpm
MD5: 1bc05a9f525fc1ef5082378773650364
SHA-256: 2ca223d14bf1ca7267284c192248914b33c1c2dad2c6240beb07a5f59d755460
Size: 39.37 kB - php-snmp-8.1.32-1.module+el9+1207+c20e9810.ML.1.x86_64.rpm
MD5: 18cd6802de0bf56967786a9511c9d58d
SHA-256: 6781de90daa804fc6dc2b3af1f939d49e9189be15cbd0f9a947154722e85318f
Size: 30.30 kB - php-soap-8.1.32-1.module+el9+1207+c20e9810.ML.1.x86_64.rpm
MD5: 8aa915f8c2de87470e2e949ff9af403d
SHA-256: 383096a008e6e739267a6f468f48f3069207dd10fcc165bf52fbe1b1eb796b3d
Size: 137.70 kB - php-xml-8.1.32-1.module+el9+1207+c20e9810.ML.1.x86_64.rpm
MD5: c8185c96e2edb4a9ed5bfc7c1bdb5253
SHA-256: 956eebfe8e15f24992bfc2b1f6caee716e967cfbb4035da9494815221ce1beb8
Size: 141.69 kB