php:8.2 security update
エラータID: AXSA:2026-2129:01
リリース日:
2026/10/23 Friday - 20:15
題名:
php:8.2 security update
影響のあるチャネル:
Asianux Server 8 for x86_64
Severity:
High
Description:
以下項目について対処しました。
[Security Fix]
- PHP のメモリ制限処理には、メモリ領域の解放後利用の問題があるため、
リモートの攻撃者により、巧妙に細工された HTTP リクエストを介して、
任意のコードの実行を可能とする脆弱性が存在します。(CVE-2026-109618)
- PHP のエラー処理、およびワーカープロセスの状態管理には、メモリ領域
の解放後利用の問題があるため、リモートの攻撃者により、任意のコードの
実行を可能とする脆弱性が存在します。(CVE-2026-109619)
Modularity name: php
Stream name: 8.2
解決策:
パッケージをアップデートしてください。
CVE:
CVE-2026-109618
PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The subsequent request cleanup procedure may read or branch on this memory. Multiple OOM strategies can consistently trigger this condition and lead to remote code execution (RCE).
PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The subsequent request cleanup procedure may read or branch on this memory. Multiple OOM strategies can consistently trigger this condition and lead to remote code execution (RCE).
CVE-2026-109619
PHP has various global state that temporarily points into request memory. In some scenarios, global state may not be correctly reset, or may be repopulated after being reset. The global state may then refer to request memory even after it has been freed. Subsequent requests may read or branch on this stale state before it is fully initialized. Multiple strategies can trigger this condition and produce remote code execution (RCE).
PHP has various global state that temporarily points into request memory. In some scenarios, global state may not be correctly reset, or may be repopulated after being reset. The global state may then refer to request memory even after it has been freed. Subsequent requests may read or branch on this stale state before it is fully initialized. Multiple strategies can trigger this condition and produce remote code execution (RCE).
追加情報:
N/A
ダウンロード:
SRPMS
- libzip-1.7.3-1.module+el8+2065+fb7190f5.src.rpm
MD5: 8f7fc3a2d08ce14a6c362ee8a60c03e8
SHA-256: 1d76d90f2e37c412a46b6678fd5a0fde005faa37bd24fb89f5667fcfacac1ee9
Size: 746.87 kB - php-pear-1.10.14-1.module+el8+2065+fb7190f5.src.rpm
MD5: 002222b2fc10cc6c991037073966b1dd
SHA-256: d6cc06ea1f471cab48e302089e86962b6f20898f03d7ce4cbffec4dd06d7214c
Size: 380.78 kB - php-pecl-apcu-5.1.23-1.module+el8+2065+fb7190f5.src.rpm
MD5: 5a75642d720bd75850d59af8cc62d7a2
SHA-256: 7ef2c96841d07b4bb4f272b12461cdc7248a7a2bf593e52aab3b7ff98207f625
Size: 105.42 kB - php-pecl-rrd-2.0.3-1.module+el8+2065+fb7190f5.src.rpm
MD5: c732c59d9e27a4abef192b1f4a6e9a68
SHA-256: 50b2e59a697fc3cb3c11efe2e37aea518b9c79634ea9cadd0ce5126db84ef25d
Size: 33.67 kB - php-pecl-xdebug3-3.2.2-2.module+el8+2065+fb7190f5.src.rpm
MD5: 2a1d37b1f2bc696b985a9dfb69ad9afb
SHA-256: 5fa8e606714d1b39b5f1c13062e94c94acc2f7ae6f649011909b9d3c361f745b
Size: 465.77 kB - php-pecl-zip-1.22.3-1.module+el8+2065+fb7190f5.src.rpm
MD5: b0182adf014cb02f09620f952087decc
SHA-256: 020e7628f9bdd66ea05d1851030dff4c9ed60ba39e319f0d1521b6e4aae155f0
Size: 368.63 kB - php-8.2.33-1.module+el8+2065+fb7190f5.ML.1.src.rpm
MD5: 6d21178345113cf744c88137c105923d
SHA-256: 880ad34c615402737941beeba59e0ff8935122b5731fe7c97ba246e60e41160b
Size: 11.91 MB
Asianux Server 8 for x86_64
- apcu-panel-5.1.23-1.module+el8+2065+fb7190f5.noarch.rpm
MD5: 3ebc04257945601356f73bd9ee9df75c
SHA-256: 2d6bf1368212c8f9ae89dd5f52d92d14727a70f22d70db6589beb6b48f918963
Size: 22.84 kB - libzip-1.7.3-1.module+el8+2065+fb7190f5.x86_64.rpm
MD5: 2cb4a64cfb9d8bab1806f37c480e532a
SHA-256: 2fddc042676ddc091aadd20b02f09abf6f6dab7b2eeb4b55428dd6c62b216711
Size: 65.77 kB - libzip-debugsource-1.7.3-1.module+el8+2065+fb7190f5.x86_64.rpm
MD5: e7a8b4270a16644e47322f35ae61525c
SHA-256: c5275aa48ed8aaf6905037bb070fa57ee2b8af85f2da5fa48618fad035b59f64
Size: 104.79 kB - libzip-devel-1.7.3-1.module+el8+2065+fb7190f5.x86_64.rpm
MD5: e0a54951f1cd8ef79a784251b136d112
SHA-256: b123c5fa74b8e357e9b2c075574492d1d06ff03856585b9f5b0ba58f0b8dc959
Size: 188.59 kB - libzip-tools-1.7.3-1.module+el8+2065+fb7190f5.x86_64.rpm
MD5: b64f2b7f3b5d361320d7eb567aa7ea20
SHA-256: 23fc724f5fc6198edd0aa328a0b8dbb75698254c2528e8778d6516c29ce1594b
Size: 42.85 kB - php-8.2.33-1.module+el8+2065+fb7190f5.ML.1.x86_64.rpm
MD5: b199be019a61ad7f7f73d41c0fb9ac4a
SHA-256: 5a672abf11b1a7c993ef5367e9dfea8825b21ff23a6807e550a24cd8d38b0bec
Size: 1.82 MB - php-bcmath-8.2.33-1.module+el8+2065+fb7190f5.ML.1.x86_64.rpm
MD5: d24793ee30f59a243d851c912a5639c1
SHA-256: ea2297daf28ccff2cf25d8bb4d30b2e70b697ab7c4cd8cdd00723b4441b8b021
Size: 80.35 kB - php-cli-8.2.33-1.module+el8+2065+fb7190f5.ML.1.x86_64.rpm
MD5: b8995f9ff90fed2ad83334902f34ad42
SHA-256: cb42453c1a32f5439096cdd8c4114c6529a6f6fb187f8d739bd468f76365dedd
Size: 3.67 MB - php-common-8.2.33-1.module+el8+2065+fb7190f5.ML.1.x86_64.rpm
MD5: 4fe3a24a2c396f68633964837b8bd0bb
SHA-256: 1000155548da07a8930ad0d5b2ba3559d2a7af74c932c2c0ac9b7853c04a71fe
Size: 750.12 kB - php-dba-8.2.33-1.module+el8+2065+fb7190f5.ML.1.x86_64.rpm
MD5: fbb95600dbf1115985ea3f8f7e5e3fb6
SHA-256: 9c4ebdb130f2063f057a359dde571ccdef929d7a6e9da8b2e3a954628273dc7a
Size: 80.99 kB - php-dbg-8.2.33-1.module+el8+2065+fb7190f5.ML.1.x86_64.rpm
MD5: 3bbffb4b9e7e2b917bd69be08481defb
SHA-256: 2efbd82e67c8db54c2b622d915f8f4f6cb76c47b855563d7a50eeb8dc821c498
Size: 1.91 MB - php-debugsource-8.2.33-1.module+el8+2065+fb7190f5.ML.1.x86_64.rpm
MD5: 5b4413a38019eef547525d16ae143b69
SHA-256: 02c48af320ef12dc5181aa0c8100782091b780078df1234f8de108a328237b42
Size: 4.60 MB - php-devel-8.2.33-1.module+el8+2065+fb7190f5.ML.1.x86_64.rpm
MD5: f020391820c32959fa49c54614938b15
SHA-256: 62a429e41d9daaf40fc8bb7e083754776213bd99d67021e14fe938aebc62e3e2
Size: 829.35 kB - php-embedded-8.2.33-1.module+el8+2065+fb7190f5.ML.1.x86_64.rpm
MD5: f02e627dbc293af2583b0ece1d948af0
SHA-256: fd96b47d40af93796961d8a5614d01b807f8ab1a5c9357bd778e4e173b6814d9
Size: 1.81 MB - php-enchant-8.2.33-1.module+el8+2065+fb7190f5.ML.1.x86_64.rpm
MD5: c92f5cdd5e3bca64fddf4b0964054b84
SHA-256: 780fc8be6315ee175e354aa3ae0ad8146dc9992a4fe0cbc61859c33e9e01c419
Size: 64.99 kB - php-ffi-8.2.33-1.module+el8+2065+fb7190f5.ML.1.x86_64.rpm
MD5: 178c4cca2ae9fdd8ff8290fb9d1a6d8a
SHA-256: ef5bb61f7ec23ec7319182bae26febc2ca402f62bafa60727e4eae227194b5ef
Size: 121.74 kB - php-fpm-8.2.33-1.module+el8+2065+fb7190f5.ML.1.x86_64.rpm
MD5: 992f922c2025ec47e3fec5295b2b8a83
SHA-256: 9115d6ffadd812df99adbc6228ae29fb46ee72b78f0784244cf009d6e0100688
Size: 1.91 MB - php-gd-8.2.33-1.module+el8+2065+fb7190f5.ML.1.x86_64.rpm
MD5: 126172b75cd83f404a4f113c799e79a3
SHA-256: fe0c3d98fd6ad4c27963358907d7f4b20e5e4a7b5c79fe00fbba161ad28d0a54
Size: 86.34 kB - php-gmp-8.2.33-1.module+el8+2065+fb7190f5.ML.1.x86_64.rpm
MD5: 9b50a0b784ea85b00381ccdae0790174
SHA-256: 8407fd024c4a1d4d0e567b9318a07e875a7177ab1d0ac4da3e27d7b9f2a8d9a5
Size: 79.29 kB - php-intl-8.2.33-1.module+el8+2065+fb7190f5.ML.1.x86_64.rpm
MD5: 04c97e7c365288d26bb81ccbdc20f4d0
SHA-256: 85f3bc479be9de057d1c6734dfd2c4cef1e9090d9397abd91e76b64cea66699e
Size: 206.42 kB - php-ldap-8.2.33-1.module+el8+2065+fb7190f5.ML.1.x86_64.rpm
MD5: f8d32fa69ae030c10c0dfcfcf1dbdc3d
SHA-256: e98686716e2fa052f87716a9b2a7a59e2ad8bb4283249842a8b96a438ce8166c
Size: 87.85 kB - php-mbstring-8.2.33-1.module+el8+2065+fb7190f5.ML.1.x86_64.rpm
MD5: 422317b2a048684bd4443ae14e3d279e
SHA-256: da80b798e14e960a1640b9bbc44ded09c3426d42d5f63cb4f89978b66cb6308d
Size: 529.53 kB - php-mysqlnd-8.2.33-1.module+el8+2065+fb7190f5.ML.1.x86_64.rpm
MD5: 2a575252d5300b9645f2a8ebcb4c9779
SHA-256: 7b299d266a01697585d37fff866da4ee105a0af36b2ae7be60994decd10a9625
Size: 188.73 kB - php-odbc-8.2.33-1.module+el8+2065+fb7190f5.ML.1.x86_64.rpm
MD5: 7f5bed56fa5f3609a9dc41946f375999
SHA-256: 458ae53728b2f2e651e30e29f6ec499dace23f3cac0cc02811bf818f3640be49
Size: 92.13 kB - php-opcache-8.2.33-1.module+el8+2065+fb7190f5.ML.1.x86_64.rpm
MD5: 22ef0ab535f9fb9cff4b5473bf0db65e
SHA-256: 885b9e813cc897f05f9ff7071cf96dc545398cce73fe01a553a6fc2b30e88ee8
Size: 416.15 kB - php-pdo-8.2.33-1.module+el8+2065+fb7190f5.ML.1.x86_64.rpm
MD5: aef6e3bdbf7a6e5534e73cb28f4957c6
SHA-256: 9fe3c9e24c7e252228a863d7489a9a81c061f3c50ea8b0ff4f0dc2a2ceb7c61a
Size: 133.44 kB - php-pear-1.10.14-1.module+el8+2065+fb7190f5.noarch.rpm
MD5: 68edbf567fe83472d1bd6ce44aec89e3
SHA-256: 83d2829895afd12594f29c89dc795232faec38219dd1e96e044b0d5ee4697874
Size: 360.84 kB - php-pecl-apcu-5.1.23-1.module+el8+2065+fb7190f5.x86_64.rpm
MD5: aeabce2724cf1d03852ea503a308edcc
SHA-256: 6d6b795f6da7002ccc44105fc4b52216ade789edcd69a7b733a60bc6f414132a
Size: 62.27 kB - php-pecl-apcu-debugsource-5.1.23-1.module+el8+2065+fb7190f5.x86_64.rpm
MD5: d1193fec90acf6622644c70dbf3be2bb
SHA-256: 5ba6e2c5b8e8b32e9a205a0ab5cb621d051a4c6eaa707018d21093856ff56612
Size: 51.52 kB - php-pecl-apcu-devel-5.1.23-1.module+el8+2065+fb7190f5.x86_64.rpm
MD5: 674dbee6535ff1af9007ba0e299197f6
SHA-256: 6a40800845af88e5240dfd130b969680e1a3f5fe3a96da9e247c88b5da003c5b
Size: 45.82 kB - php-pecl-rrd-2.0.3-1.module+el8+2065+fb7190f5.x86_64.rpm
MD5: 7c0872d3ed6fa566f2696219228b27e6
SHA-256: f7e835fabc6cfb716fd37290c3542f948a6c5977970e185c76ab0f4d0184f83b
Size: 30.54 kB - php-pecl-rrd-debugsource-2.0.3-1.module+el8+2065+fb7190f5.x86_64.rpm
MD5: c7c132bf57cc7ce7c21664ce5bd6cae4
SHA-256: 351b6f416be264f7951e2ebd775ef8abbb0675a2cfa22b82779ea726d446db91
Size: 22.50 kB - php-pecl-xdebug3-3.2.2-2.module+el8+2065+fb7190f5.x86_64.rpm
MD5: 8b53abad7154c308d92fd93bdab1774b
SHA-256: 4c857bcfd77d60246cc34cdaba3c7f35b3371bb1c512f26689d3869331b0430a
Size: 211.51 kB - php-pecl-xdebug3-debugsource-3.2.2-2.module+el8+2065+fb7190f5.x86_64.rpm
MD5: 936a736e766ded3064a8e8740bfc850e
SHA-256: da280d319d734245451066467d129b45f92f95c8c346fcc09a634b35f828cb12
Size: 159.66 kB - php-pecl-zip-1.22.3-1.module+el8+2065+fb7190f5.x86_64.rpm
MD5: c9aaf1615adb61fe8eb070e676b2cab9
SHA-256: da43f7ae5bd3f12ddb6215a043e06f18ffdf283a6fdc6006446aa3f713c00464
Size: 59.33 kB - php-pecl-zip-debugsource-1.22.3-1.module+el8+2065+fb7190f5.x86_64.rpm
MD5: 23248bec89c4d321c554d3e801be54c4
SHA-256: f9229744789cf7269ef109e242e9c54bcf4a24a39e4dd3e73cb6ba4a82a2e27e
Size: 36.09 kB - php-pgsql-8.2.33-1.module+el8+2065+fb7190f5.ML.1.x86_64.rpm
MD5: 659ab4408dded42bb72c4ad6703a4fe4
SHA-256: 5d7cba80783ea7224f3d3522339a63c4ef1035b517fc44759597dcc0c479e795
Size: 122.58 kB - php-process-8.2.33-1.module+el8+2065+fb7190f5.ML.1.x86_64.rpm
MD5: d4e9971a16d64cde84fbfebc8be7c797
SHA-256: 8f68444b459b10954740cd1f2964b0f62be08b28869d24c3702b76f00c8735bd
Size: 87.00 kB - php-snmp-8.2.33-1.module+el8+2065+fb7190f5.ML.1.x86_64.rpm
MD5: a28164f7a15b9f7768aff5f477262de7
SHA-256: 50f31e6718e3c9430d2d2b058a7097004a44a9e78ead4a4674c5d2e01fc1579b
Size: 78.43 kB - php-soap-8.2.33-1.module+el8+2065+fb7190f5.ML.1.x86_64.rpm
MD5: 0ae1fccb12602bc7a684af89466314f4
SHA-256: 6315f7b73d48e1609bf518719dd3dfa54f54e9acc84e0316c94a4c272ac5cf65
Size: 187.07 kB - php-xml-8.2.33-1.module+el8+2065+fb7190f5.ML.1.x86_64.rpm
MD5: 174f6982f151ec2ed91a63ae35d5ccad
SHA-256: 1fa1304c261b42f9bec614fe24567e5247768203846579884d46cc2ccfd08da7
Size: 189.81 kB