php:7.2 security update
エラータID: AXSA:2026-2132:01
リリース日:
2026/10/23 Friday - 20:30
題名:
php:7.2 security update
影響のあるチャネル:
Asianux Server 8 for x86_64
Severity:
High
Description:
以下項目について対処しました。
[Security Fix]
- PHP のメモリ制限処理には、メモリ領域の解放後利用の問題があるため、
リモートの攻撃者により、巧妙に細工された HTTP リクエストを介して、
任意のコードの実行を可能とする脆弱性が存在します。(CVE-2026-109618)
- PHP のエラー処理、およびワーカープロセスの状態管理には、メモリ領域
の解放後利用の問題があるため、リモートの攻撃者により、任意のコードの
実行を可能とする脆弱性が存在します。(CVE-2026-109619)
Modularity name: php
Stream name: 7.2
解決策:
パッケージをアップデートしてください。
CVE:
CVE-2026-109618
PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The subsequent request cleanup procedure may read or branch on this memory. Multiple OOM strategies can consistently trigger this condition and lead to remote code execution (RCE).
PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The subsequent request cleanup procedure may read or branch on this memory. Multiple OOM strategies can consistently trigger this condition and lead to remote code execution (RCE).
CVE-2026-109619
PHP has various global state that temporarily points into request memory. In some scenarios, global state may not be correctly reset, or may be repopulated after being reset. The global state may then refer to request memory even after it has been freed. Subsequent requests may read or branch on this stale state before it is fully initialized. Multiple strategies can trigger this condition and produce remote code execution (RCE).
PHP has various global state that temporarily points into request memory. In some scenarios, global state may not be correctly reset, or may be repopulated after being reset. The global state may then refer to request memory even after it has been freed. Subsequent requests may read or branch on this stale state before it is fully initialized. Multiple strategies can trigger this condition and produce remote code execution (RCE).
追加情報:
N/A
ダウンロード:
SRPMS
- libzip-1.5.1-2.module+el8+2062+c61084e7.src.rpm
MD5: 32bcbfc13169bcf33cd14420c9480d62
SHA-256: 804e285bb2bb1b883c8a906b5de969a82145c772ecbfc59ca630f6e353fbcafe
Size: 717.57 kB - php-pear-1.10.5-9.module+el8+2062+c61084e7.src.rpm
MD5: c3dd7ab6483ffc14966a6f8fe249b632
SHA-256: 8516c5ed10e08eed68eeb3fb00cdf15e793d170a563fdd78f621cb1302fa6c60
Size: 376.51 kB - php-pecl-apcu-5.1.12-2.module+el8+2062+c61084e7.src.rpm
MD5: 3045f65da000e2e1c1b489a2bc476022
SHA-256: 9c5a64936a06cecc36ff7888c46a546887ea96abeb9f3ba8bdb19d46cc51443a
Size: 118.17 kB - php-pecl-zip-1.15.3-1.module+el8+2062+c61084e7.src.rpm
MD5: f71c7e6268176b1265e5a91adde37c4b
SHA-256: 41b8ed8862629f609f52e146704dec985dc4bfba65806f980b1737d0150bf6f1
Size: 274.32 kB - php-7.2.24-1.module+el8+2062+c61084e7.ML.1.src.rpm
MD5: d4d9d2290fba7b4a4fd324a3d186cd61
SHA-256: f9ed25861aa8f2619b0a50666bfc16fd9a9bdf6bafbe25de889b987f5f34c52d
Size: 11.87 MB
Asianux Server 8 for x86_64
- apcu-panel-5.1.12-2.module+el8+2062+c61084e7.noarch.rpm
MD5: f2ad88f9e9ff63b4afa0df94e84eaf22
SHA-256: 81d60aaa72aec6b41facb2efc1062b4543544b934fe0029a78e378df32e7f301
Size: 22.21 kB - libzip-1.5.1-2.module+el8+2062+c61084e7.x86_64.rpm
MD5: 36b212edf67a09c02dc6a3c326c7eed5
SHA-256: 41aeb1ff36fc42bbc0e9d29999c49673bd366c9e5b2673d5886667d559c8a133
Size: 60.91 kB - libzip-debugsource-1.5.1-2.module+el8+2062+c61084e7.x86_64.rpm
MD5: 45af1eb3232e9d05b3f1dd740873b239
SHA-256: e3932edcfde1c7b94f41cee3c375f768fd152b6f456b296c1b669b797c47c6bc
Size: 96.81 kB - libzip-devel-1.5.1-2.module+el8+2062+c61084e7.x86_64.rpm
MD5: a39a4b13a54066aec1602f61afa01745
SHA-256: a665b44829fad8a333987384716197ac6129a9b3567703f56386997bf5620c98
Size: 178.12 kB - libzip-tools-1.5.1-2.module+el8+2062+c61084e7.x86_64.rpm
MD5: 9e14c188cbe268b917726577c148e01f
SHA-256: b2d51ff6217ec32286119922a524a50fcc43acbd5a6ed0fb41ecc5f696a767e2
Size: 42.18 kB - php-7.2.24-1.module+el8+2062+c61084e7.ML.1.x86_64.rpm
MD5: 5597ce2ec484768919d3b3d73665e5db
SHA-256: 189599c1b50c86e3439452534c137e4e12a78c8739d63657b601e0c7895f5336
Size: 1.53 MB - php-bcmath-7.2.24-1.module+el8+2062+c61084e7.ML.1.x86_64.rpm
MD5: 2aa7de4e544290a54a7d5b2d7f4336ce
SHA-256: ff130719647e39f5553d858b6991c2d09600e48e9b25723d67ba64147b6962af
Size: 78.08 kB - php-cli-7.2.24-1.module+el8+2062+c61084e7.ML.1.x86_64.rpm
MD5: 2c9ff19218c948ca61adf3b3444b0d3f
SHA-256: 9af43c500c5791375943c90288daa0fe707fbef62346b64fcd3b4718d66c5b3c
Size: 3.09 MB - php-common-7.2.24-1.module+el8+2062+c61084e7.ML.1.x86_64.rpm
MD5: d7f2ff67615b145a1f6bb1c75b611b30
SHA-256: 9d20ff6404e4d196612291875d3fb19cd7669d401cdf60b725ec5725e2b2cbc2
Size: 658.86 kB - php-dba-7.2.24-1.module+el8+2062+c61084e7.ML.1.x86_64.rpm
MD5: cbf34245103783e61eb1e357cfd3f1c3
SHA-256: 23f10de318c7b1c92518f50abe586b148cc028cfc28e58be11ae055e68fc86fc
Size: 76.64 kB - php-dbg-7.2.24-1.module+el8+2062+c61084e7.ML.1.x86_64.rpm
MD5: fe82e965c9cc534bacc99a9fc0f25da5
SHA-256: 9a876e9eeae4267ec2dce61c1a8850fe3cc0b301e5cc1af52ea419fd4b03496f
Size: 1.64 MB - php-debugsource-7.2.24-1.module+el8+2062+c61084e7.ML.1.x86_64.rpm
MD5: 8f8497771deb9fc0c866d88919db19c9
SHA-256: 0b47a0d1a826093b6ef6c36a0125afd01d1420cef42d187490c7e873a909242f
Size: 4.09 MB - php-devel-7.2.24-1.module+el8+2062+c61084e7.ML.1.x86_64.rpm
MD5: ce5416753db1488414d7806b5af080d9
SHA-256: 084db9a37429350733c4ccd299ceb1dc2c112cc7a53e6cb13bed3b8d1065fce4
Size: 710.99 kB - php-embedded-7.2.24-1.module+el8+2062+c61084e7.ML.1.x86_64.rpm
MD5: 7f25d8184e80b2c5e1ab36afcd1da1e3
SHA-256: 71e2323cde997e4c436e265dc0398db42dc694a6fb12f74bb7b9611ab92be7ec
Size: 1.52 MB - php-enchant-7.2.24-1.module+el8+2062+c61084e7.ML.1.x86_64.rpm
MD5: 6ac515d3bfe5892ee3a987fa779e3f5d
SHA-256: 26c2379874d404552d5bafee4d69008fa7ad69cd8e08161542ffac441a8fe852
Size: 62.43 kB - php-fpm-7.2.24-1.module+el8+2062+c61084e7.ML.1.x86_64.rpm
MD5: 8db813af7def9985c2a8d7929dddd614
SHA-256: 54666fe9f7cd88082a933ab9f8303f53a260b3d3047d428ac238efb595ae7cfe
Size: 1.60 MB - php-gd-7.2.24-1.module+el8+2062+c61084e7.ML.1.x86_64.rpm
MD5: 2bbd9725b00240a82b3d47dd710d9719
SHA-256: 3ed02e41a5759c53cbe1903fb0cc788cabcc4261a221448b22bf66ff65cf62c5
Size: 82.56 kB - php-gmp-7.2.24-1.module+el8+2062+c61084e7.ML.1.x86_64.rpm
MD5: c89a507b7116404261c1dd561f271e62
SHA-256: 61e90eddaed7ed68777ee4ba108ec3f1d756b901fe9afff2732085df18a9b0ea
Size: 74.26 kB - php-intl-7.2.24-1.module+el8+2062+c61084e7.ML.1.x86_64.rpm
MD5: 24d50feee9831d7b9bfc1abc927df4f5
SHA-256: 2b4794c9cacd6f3191b45cafbb872eab24aabb89bb56a1383827361e9090d504
Size: 190.69 kB - php-json-7.2.24-1.module+el8+2062+c61084e7.ML.1.x86_64.rpm
MD5: de5f271080ad8b03ab27d8f660e3694e
SHA-256: 84623e608fabe8e5b24bb573ce3b250faf99916b8352e1553149b35e290d5e20
Size: 72.31 kB - php-ldap-7.2.24-1.module+el8+2062+c61084e7.ML.1.x86_64.rpm
MD5: 5a05d8cefdf8afa935e1f07d4f2b4ce4
SHA-256: 2fab8a713d58343301708b319cc2834c2fdd15c0212d6b06cfd1536ca6d4975b
Size: 77.83 kB - php-mbstring-7.2.24-1.module+el8+2062+c61084e7.ML.1.x86_64.rpm
MD5: 5f9447e03340fe77aaebc46eeaecb029
SHA-256: e84e470ffcc18e7440ab35e9a56081f6dedf5c261265ed70c534753c09b18477
Size: 578.61 kB - php-mysqlnd-7.2.24-1.module+el8+2062+c61084e7.ML.1.x86_64.rpm
MD5: 6ad426ae61591ecd44000db131fe0c8d
SHA-256: fb0886a71fe846fe81ae6d5ba31ef83c2c3d6c53d8010d6c224ede3d14a2ec56
Size: 189.01 kB - php-odbc-7.2.24-1.module+el8+2062+c61084e7.ML.1.x86_64.rpm
MD5: c6fa1cb3a4d75e53bb8507aac3422daa
SHA-256: f21bddc2cd94924ebf3b2d137fcb6b13dbbdb245a5eec7e0b5e02586447076ba
Size: 87.13 kB - php-opcache-7.2.24-1.module+el8+2062+c61084e7.ML.1.x86_64.rpm
MD5: 6a91b07e36a478297c4051906419a4a1
SHA-256: 5cf664816a32b5fd90ea7e8be7699db58b0887d28ae75db9c6d48010ea6353ee
Size: 229.93 kB - php-pdo-7.2.24-1.module+el8+2062+c61084e7.ML.1.x86_64.rpm
MD5: 2ca864ccc18fb024a3bc53b7f62a03b7
SHA-256: e30772d94d6a990e106d37f629c9aa5d548bf6c34a1a1b05ad1e5735bd9801ee
Size: 121.27 kB - php-pear-1.10.5-9.module+el8+2062+c61084e7.noarch.rpm
MD5: 6cceac2ae60b84cb76f64b9311b8beaa
SHA-256: dab659667ccdf4c848818ad8e5778a9d398b5f9e73931daa6bf6b00e219f4770
Size: 356.45 kB - php-pecl-apcu-5.1.12-2.module+el8+2062+c61084e7.x86_64.rpm
MD5: 27a5002ce94ea2fa59e2fa91bbe32bf8
SHA-256: 2da762f3a0f3b5bc13c569bf2685c2f370272909377ed0ca08a23c22dc5406ff
Size: 63.67 kB - php-pecl-apcu-debugsource-5.1.12-2.module+el8+2062+c61084e7.x86_64.rpm
MD5: 2b332b2c68b9a05a1696c540472bc57e
SHA-256: 1f8a22971c2c0b70e42d99e7c1451801abe2f85af35c5cc922766ad9f8ba383e
Size: 53.22 kB - php-pecl-apcu-devel-5.1.12-2.module+el8+2062+c61084e7.x86_64.rpm
MD5: e51e79b23cb1fe5358fb5f43bd34c6d4
SHA-256: 80bd7d861e2b5abcd645922b61fe83393d069b6463d6d6b44b9cbaa21a8fdb4f
Size: 44.65 kB - php-pecl-zip-1.15.3-1.module+el8+2062+c61084e7.x86_64.rpm
MD5: d191afc3f27e44df2ddba5bd62647b94
SHA-256: 6c3b9ef0097c79f1a269dffe44f36c57ef35399126eb5b746af702aa4af3decb
Size: 49.11 kB - php-pecl-zip-debugsource-1.15.3-1.module+el8+2062+c61084e7.x86_64.rpm
MD5: fb2b7d690d69296351453b4f5bd0d622
SHA-256: 41620da6865e859034a693cd1535bc12a6dc01704f445f6da49aab22d08cda8c
Size: 29.09 kB - php-pgsql-7.2.24-1.module+el8+2062+c61084e7.ML.1.x86_64.rpm
MD5: 87fa308eda7782eca2d35d1f04ee4f7f
SHA-256: e4612dc6305c712d2d751635cd18af82ad70bb0f7c6f93f17fc041cbb2921afb
Size: 116.29 kB - php-process-7.2.24-1.module+el8+2062+c61084e7.ML.1.x86_64.rpm
MD5: 6a3315a9a66868882a9b4b20d0aaa06d
SHA-256: eb11a98b933539b737b50c16d82db00c5400f9ee4c25ca7fa2488faa2380c3f2
Size: 82.77 kB - php-recode-7.2.24-1.module+el8+2062+c61084e7.ML.1.x86_64.rpm
MD5: 30ed98372a6186a1e82e49867a9aa834
SHA-256: 3d003dee69798c7d56e95ce1f0d0f0b5531ea5dbe7a72abbbf1604033a993d83
Size: 58.29 kB - php-snmp-7.2.24-1.module+el8+2062+c61084e7.ML.1.x86_64.rpm
MD5: 5a03e4113a0de1a95a286874d1247921
SHA-256: 4c0d96dab179489adc408a9ee20263d7c28c716216833ca70ff11e4dd5b320d6
Size: 72.81 kB - php-soap-7.2.24-1.module+el8+2062+c61084e7.ML.1.x86_64.rpm
MD5: c5504851755546908c9e656bb6499b95
SHA-256: 9d4c8cacda6e96a76bb820560e9b3814ea510eca6df9b526877026ab8432290c
Size: 175.79 kB - php-xml-7.2.24-1.module+el8+2062+c61084e7.ML.1.x86_64.rpm
MD5: b8b6f4aad308f3bc4861b365e8f6b3fa
SHA-256: 5fb976f3b622861ff5c1ad5013aaf7a3ad0e5cbe868a89e4e5b4358688f450a4
Size: 186.63 kB - php-xmlrpc-7.2.24-1.module+el8+2062+c61084e7.ML.1.x86_64.rpm
MD5: adde11f84f5f5ef8c84a14925686deb5
SHA-256: 9b5ebad08cca7a63bd1f675a1f4f1630c2af511953b3d6cfbe39dafddd00a424
Size: 87.82 kB