php:7.3 security update
エラータID: AXSA:2026-2131:01
リリース日:
2026/10/23 Friday - 20:25
題名:
php:7.3 security update
影響のあるチャネル:
Asianux Server 8 for x86_64
Severity:
High
Description:
以下項目について対処しました。
[Security Fix]
- PHP のメモリ制限処理には、メモリ領域の解放後利用の問題があるため、
リモートの攻撃者により、巧妙に細工された HTTP リクエストを介して、
任意のコードの実行を可能とする脆弱性が存在します。(CVE-2026-109618)
- PHP のエラー処理、およびワーカープロセスの状態管理には、メモリ領域
の解放後利用の問題があるため、リモートの攻撃者により、任意のコードの
実行を可能とする脆弱性が存在します。(CVE-2026-109619)
Modularity name: php
Stream name: 7.3
解決策:
パッケージをアップデートしてください。
CVE:
CVE-2026-109618
PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The subsequent request cleanup procedure may read or branch on this memory. Multiple OOM strategies can consistently trigger this condition and lead to remote code execution (RCE).
PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The subsequent request cleanup procedure may read or branch on this memory. Multiple OOM strategies can consistently trigger this condition and lead to remote code execution (RCE).
CVE-2026-109619
PHP has various global state that temporarily points into request memory. In some scenarios, global state may not be correctly reset, or may be repopulated after being reset. The global state may then refer to request memory even after it has been freed. Subsequent requests may read or branch on this stale state before it is fully initialized. Multiple strategies can trigger this condition and produce remote code execution (RCE).
PHP has various global state that temporarily points into request memory. In some scenarios, global state may not be correctly reset, or may be repopulated after being reset. The global state may then refer to request memory even after it has been freed. Subsequent requests may read or branch on this stale state before it is fully initialized. Multiple strategies can trigger this condition and produce remote code execution (RCE).
追加情報:
N/A
ダウンロード:
SRPMS
- libzip-1.5.2-1.module+el8+2063+c2ab162d.src.rpm
MD5: 8afa71f162e8dfe11a976a571efcef6b
SHA-256: d7b288a4764eeb9a9a1fddee3f5fc63a0228c37e30585878466de82a0b4d6959
Size: 725.28 kB - php-pear-1.10.9-1.module+el8+2063+c2ab162d.src.rpm
MD5: 622b04b56e62835ffd566c2be83886df
SHA-256: 5deff968ee3f24dfcfaefda94d971d9db24cb314dbfe77a89639b06b186a5fa1
Size: 377.09 kB - php-pecl-apcu-5.1.17-1.module+el8+2063+c2ab162d.src.rpm
MD5: cdb063ab8bcd4eac2b5ab8bd6f32c81d
SHA-256: c36f4c54cf1dbb2dce7d083aa12348ba1817ac4c8849b0f6fc2ff4a024b81ff0
Size: 107.58 kB - php-pecl-rrd-2.0.1-1.module+el8+2063+c2ab162d.src.rpm
MD5: 7d6efe564d970e54e009530cd9d3ce10
SHA-256: 39061b874e2f23be83f73e70d4f9f6ab88ae40aebf45097cca973ef2cbdb318b
Size: 33.12 kB - php-pecl-xdebug-2.8.0-1.module+el8+2063+c2ab162d.src.rpm
MD5: a0ee0e1791616348fb89aa735517893a
SHA-256: 920eff0e9a63adb0d826f5c0aab9ec9a8ac57fd80ca44c48a36d6491f9d53dcf
Size: 448.42 kB - php-pecl-zip-1.15.4-1.module+el8+2063+c2ab162d.src.rpm
MD5: 9f905b95175c5b1244495651f2d1463c
SHA-256: fc07a1ecfe78d8ffff223d98055da80c6071c4c04098d9d1680a000ddf2ef562
Size: 275.38 kB - php-7.3.20-1.module+el8+2063+c2ab162d.ML.1.src.rpm
MD5: 79f93e744cb4f8db1c99d527669c2750
SHA-256: bb2ac35319eceda94238b25e4ef96ce4e49531eddf8577c8ed823fbb3c8de5c3
Size: 11.69 MB
Asianux Server 8 for x86_64
- apcu-panel-5.1.17-1.module+el8+2063+c2ab162d.noarch.rpm
MD5: c40f47b6548350045d16c2377c35b406
SHA-256: 2435a6705d5a164d780431ae9da37f8a8295542f8a7ba291360d66de0d7d4eda
Size: 22.21 kB - libzip-1.5.2-1.module+el8+2063+c2ab162d.x86_64.rpm
MD5: 34fc2dae7c2f1cbda08e3a5536897d9f
SHA-256: 28192176797cdd298f4b929f5b54276bda79c6ab3738852a6cb60563e4ffaa2b
Size: 61.13 kB - libzip-debugsource-1.5.2-1.module+el8+2063+c2ab162d.x86_64.rpm
MD5: 1a21b8f9eb80912837b973ab47477e86
SHA-256: 21cab4cad36e386954395bd810b3da9a320fb80ab3918ea22b43003daba24fed
Size: 97.23 kB - libzip-devel-1.5.2-1.module+el8+2063+c2ab162d.x86_64.rpm
MD5: e1506e6aa8c1b7d0ed1ccfc709ab4b2b
SHA-256: 2afc80780c55b364b6bde6be91051a45660de3c32bba1efbdcbf3977c1964259
Size: 178.70 kB - libzip-tools-1.5.2-1.module+el8+2063+c2ab162d.x86_64.rpm
MD5: 2087be788494b1d786f149c44f5599ef
SHA-256: 5f21d24d336286c48f1285f035b3ef523090bb2e120b4b2a2e969d6f6f7ab41f
Size: 42.29 kB - php-7.3.20-1.module+el8+2063+c2ab162d.ML.1.x86_64.rpm
MD5: 6a58b5b0a10e018b8bfd1a5dc44a4d95
SHA-256: cf5441690517ecc93391edd206b9144d2e1791713ae31250008ac5257add8121
Size: 1.50 MB - php-bcmath-7.3.20-1.module+el8+2063+c2ab162d.ML.1.x86_64.rpm
MD5: 163a8ad1d56257059840e5bb0d1e7373
SHA-256: 7db84dad883e48dc1c1e49e5edc419c24ca67536d3e6f0cbb170f68183a2e1ba
Size: 77.93 kB - php-cli-7.3.20-1.module+el8+2063+c2ab162d.ML.1.x86_64.rpm
MD5: 9c4381cb2096e52d519dd6180057b860
SHA-256: 435d0c85884652090b676add6dbcccb5af18bfa650e1f31716355b80bf6fffa7
Size: 3.04 MB - php-common-7.3.20-1.module+el8+2063+c2ab162d.ML.1.x86_64.rpm
MD5: 6358181e9522c85b0d3f0cf3565be6bd
SHA-256: 97e29a282a4f7119541ab75ffd7a7069163d1f3de7b5d4d0ad9104165f7f5790
Size: 667.20 kB - php-dba-7.3.20-1.module+el8+2063+c2ab162d.ML.1.x86_64.rpm
MD5: b0e6ca1a2fc315063e86741dccf31ea6
SHA-256: ca3661ce1037e95a8904efbd6e8352b31812a89b03ec9baaea20e21b11d84049
Size: 76.77 kB - php-dbg-7.3.20-1.module+el8+2063+c2ab162d.ML.1.x86_64.rpm
MD5: 5b4bf4e893df50f0f45f762eefb5988d
SHA-256: cd8c14cb8ad038723dc799cb96ec72ae33fc467e64f07a3d2754ebaf6ea532a8
Size: 1.61 MB - php-debugsource-7.3.20-1.module+el8+2063+c2ab162d.ML.1.x86_64.rpm
MD5: 7d0694588da2aa6edd8e194a120db0ec
SHA-256: 2beb69f40d04cb9b8afeda24eee5849589a92fe3b7ca4bc414048984b871528a
Size: 4.26 MB - php-devel-7.3.20-1.module+el8+2063+c2ab162d.ML.1.x86_64.rpm
MD5: 4056dd59f700a43b276d0c7c24905246
SHA-256: 5ac6dcccf767cc02a0722d4d11e4ec58557229dfeaed26126eb92b2a904db073
Size: 734.66 kB - php-embedded-7.3.20-1.module+el8+2063+c2ab162d.ML.1.x86_64.rpm
MD5: 7b0e1b3140ecbb9fd1f4a329fe7e4776
SHA-256: fb3a0df02a1e08f4bd2c56d5ae4d0fd12a2cb121d12dc8c5855a31a814c3f286
Size: 1.49 MB - php-enchant-7.3.20-1.module+el8+2063+c2ab162d.ML.1.x86_64.rpm
MD5: 725098d99cc4382b3f5b2efd69b49b1c
SHA-256: 01cf3662e46f48759d1a454209cab3cbf9571a8c930e93af2eee8bd939afbea5
Size: 62.63 kB - php-fpm-7.3.20-1.module+el8+2063+c2ab162d.ML.1.x86_64.rpm
MD5: d621b07d839cf078567c13b42a148777
SHA-256: 3915021d23148b0f9f1e403cab293546ddf78fa85c5f1ced4dedc0f4ddd8c325
Size: 1.58 MB - php-gd-7.3.20-1.module+el8+2063+c2ab162d.ML.1.x86_64.rpm
MD5: 4c6578fee719bf32247547a189974d8d
SHA-256: c329789f694eab0aff4021b11639de44e8de3e6bff72e55375677db818670739
Size: 82.51 kB - php-gmp-7.3.20-1.module+el8+2063+c2ab162d.ML.1.x86_64.rpm
MD5: dc7834ff4f9a5fd1cb71fcdd71dc3f9b
SHA-256: 2c2c97454e777f215e4af5bac3a44b4044c9cc0f83d62dd0a13bcb053251000e
Size: 75.12 kB - php-intl-7.3.20-1.module+el8+2063+c2ab162d.ML.1.x86_64.rpm
MD5: 99b9462b40914413dd43545667c16f3f
SHA-256: d8e21a1cdab24f459a96de7ff3fbf84c0c4ef49a88c53dea0db095ef99ae28b9
Size: 190.69 kB - php-json-7.3.20-1.module+el8+2063+c2ab162d.ML.1.x86_64.rpm
MD5: 7ca899fb954c1ae8f60c91c8f10e72a7
SHA-256: e886655d2bf2f1d8fc0cb22e4703a0dbdd2f997a81552fd7e45a2cc7c758a6fd
Size: 72.04 kB - php-ldap-7.3.20-1.module+el8+2063+c2ab162d.ML.1.x86_64.rpm
MD5: 1dd93dd902b1a69394f963169ce55945
SHA-256: ea89fa8fd8a47c14649a3f6e864b84c89a5401c0ad3178a3a273554d2de88b57
Size: 83.33 kB - php-mbstring-7.3.20-1.module+el8+2063+c2ab162d.ML.1.x86_64.rpm
MD5: cdd56133a33ed8afab5ce2084b0418f0
SHA-256: 12ed1fb27657a7fc3e5b1a7c315e28d3ff35e47847034a98e0688fd4a3f7d2c1
Size: 616.39 kB - php-mysqlnd-7.3.20-1.module+el8+2063+c2ab162d.ML.1.x86_64.rpm
MD5: 859961aa39494ad0cbc081b659a9c00d
SHA-256: 12aea51c2b72765095eb6768d146c13f35f59fbb93184a2ebd4523cd6f49207a
Size: 187.69 kB - php-odbc-7.3.20-1.module+el8+2063+c2ab162d.ML.1.x86_64.rpm
MD5: 901df5b68d9baf402ba8055b94235db9
SHA-256: 0036cf9c33427ca3e7c7c163f29b7ebddcfde913286ed435fe99eac866965b27
Size: 87.45 kB - php-opcache-7.3.20-1.module+el8+2063+c2ab162d.ML.1.x86_64.rpm
MD5: 52464586847fbbc702c6efa8bf325666
SHA-256: 3a6c4cfd43f3a3b09202aa8f36bc120f8f30064ce96de91db43b7a056f161cff
Size: 249.03 kB - php-pdo-7.3.20-1.module+el8+2063+c2ab162d.ML.1.x86_64.rpm
MD5: d71fd88e9e470d1173d7cfacd11aed56
SHA-256: 2cbb5fa56f641ab0ee2bffbe331c9bde8e87bc05dbc702307cec2a6215f7e3c1
Size: 120.83 kB - php-pear-1.10.9-1.module+el8+2063+c2ab162d.noarch.rpm
MD5: 68f39ac38082176a52bb70532dd2ab5f
SHA-256: 52a5a23851494b370b10641f5f7dc0bc51630719a42525d70d324e4986412b6a
Size: 357.86 kB - php-pecl-apcu-5.1.17-1.module+el8+2063+c2ab162d.x86_64.rpm
MD5: 49f59405042a688f8a1de48e580b7ebf
SHA-256: 0f8b85bab1c26edabfdae0a181f8f7d18648c874034f208cf4713bab0ba0832c
Size: 62.77 kB - php-pecl-apcu-debugsource-5.1.17-1.module+el8+2063+c2ab162d.x86_64.rpm
MD5: f37da38a17aaaca71632352545bec2d0
SHA-256: 098d6422d7ad25f9505ea84deab233fc734a96e16c614c133569dab4991885ab
Size: 49.91 kB - php-pecl-apcu-devel-5.1.17-1.module+el8+2063+c2ab162d.x86_64.rpm
MD5: 3cacfd278d7e05b5870a9c3873df6a28
SHA-256: 761bbaf19ce863738641ba4d8547fbfc8b68d7ce5edbc912a09042371bd560da
Size: 46.09 kB - php-pecl-rrd-2.0.1-1.module+el8+2063+c2ab162d.x86_64.rpm
MD5: 1ded0ccafe952c12d0d82d3363d1e383
SHA-256: 1440010b4f42652f540c5f19f50d8f66abc252405ba2745474ea4723e40353cb
Size: 30.23 kB - php-pecl-rrd-debugsource-2.0.1-1.module+el8+2063+c2ab162d.x86_64.rpm
MD5: 23efbc1d71853f98440db208af439f9e
SHA-256: 0256bed5cf2b96a9086f3a36a5921ed3de9fefecd418569d693a47848875f23e
Size: 22.38 kB - php-pecl-xdebug-2.8.0-1.module+el8+2063+c2ab162d.x86_64.rpm
MD5: 52d430896ee3e325a81191285b376b1b
SHA-256: 014b01cd0e8d14f2bf28c08a6b7c9c4f9e30ab2428d9fe12315331420fb068ab
Size: 172.69 kB - php-pecl-xdebug-debugsource-2.8.0-1.module+el8+2063+c2ab162d.x86_64.rpm
MD5: 9c1e33c37b6f633f15c7cad2effcbaee
SHA-256: 8657773ba6d3533d5363874fe5ed6b683a061271d9f2beef3c15ee4ceb9b2274
Size: 128.76 kB - php-pecl-zip-1.15.4-1.module+el8+2063+c2ab162d.x86_64.rpm
MD5: 4008a46acf09b0ff1c6a6fd85738bf23
SHA-256: 532bafbb0f61ffde59e5931dd33c2229de1fa818f872497f5c47bb6c7f7a81f4
Size: 48.96 kB - php-pecl-zip-debugsource-1.15.4-1.module+el8+2063+c2ab162d.x86_64.rpm
MD5: 6a4d2c4471cd4baf65ae84e0817ee54c
SHA-256: 9db767052c5b82a78193d8fad5b8f67d0adebf0c3315c375dcce80695517c154
Size: 29.29 kB - php-pgsql-7.3.20-1.module+el8+2063+c2ab162d.ML.1.x86_64.rpm
MD5: 7a68860a12ffe3ca03556ace5b1838aa
SHA-256: ee607a73a3df3fcfa00dd52211a7b0ca97f378c27c578762f436b8b6b5731e38
Size: 116.74 kB - php-process-7.3.20-1.module+el8+2063+c2ab162d.ML.1.x86_64.rpm
MD5: 4de6e121570e0a124762d55d92fae0f1
SHA-256: 5675444f47026d0039fbcb9b2729c3762f3726958d6d18ae9ce232bb8d2b72a8
Size: 82.95 kB - php-recode-7.3.20-1.module+el8+2063+c2ab162d.ML.1.x86_64.rpm
MD5: 9fa19bd0c4cc2c4b10a974a7aebfca84
SHA-256: 6ea9e142c18a7db24a3be768999ac12158195bc15b7457b26f7cf2c8961a02f1
Size: 58.32 kB - php-snmp-7.3.20-1.module+el8+2063+c2ab162d.ML.1.x86_64.rpm
MD5: d437304ad3d650840bda49190135a766
SHA-256: d7cb50a842705a96166a7e5fa47da15f8e4b01a8db2495c409724ddf528206d7
Size: 72.77 kB - php-soap-7.3.20-1.module+el8+2063+c2ab162d.ML.1.x86_64.rpm
MD5: 449f1b6fc3e7c1d5558c6ef33cc99061
SHA-256: 23ed721efc0123b686109dea9987dd8ab44d490f7205a8ead9e98116faef8e17
Size: 174.05 kB - php-xml-7.3.20-1.module+el8+2063+c2ab162d.ML.1.x86_64.rpm
MD5: b34418e10077870f3b0ac95ada351fce
SHA-256: 8fa370f065e90d500fd2d12df4db01f30a6322bb733dce4f594f808902cd9fa8
Size: 185.50 kB - php-xmlrpc-7.3.20-1.module+el8+2063+c2ab162d.ML.1.x86_64.rpm
MD5: 09ed98f0774eba6a430d1eb07b47963e
SHA-256: 9cbdf3a07790c00800ebaf19a5916b69da38f6494485751f47f23f0fd402f97c
Size: 87.95 kB