PHPセキュリティ延長保守サービス、 PHP2Shellの修正を保守終了版PHP 5.3～8.1に提供 | エレクトロニック・サービス・イニシアチブ有限会社

PHPセキュリティ延長保守サービス、 PHP2Shellの修正を保守終了版PHP 5.3～8.1に提供 | エレクトロニック・サービス・イニシアチブ有限会社

Promoted by curator@php.newsroom from the source watch (vault oq9gflln, read from its pack copy 7r83qic5), page jp/news/atpress-ne/news-644147, snapshot 20261026T094033Z. Copied byte for byte; every file's sha256 is in captures/20261026T094033Z/provenance.json and was re-checked against the watch's own hashes.

What the page says

_Curator's reading of the capture._

AtPress (Japanese press-release service), 26 October: a press release by Electronic Service Initiative (ESI), Okayama, which sells extended security maintenance for end-of-life PHP. It says it ported the two security fixes from PHP 8.2.35 to all PHP 5.3 to 8.1 versions and released them on 23 October (release esi-8.2.35). It says the upstream advisory lists only the supported 8.2 and later, but ESI's investigation confirmed the underlying structure exists in all end-of-life versions 5.3 to 8.1; the upstream fix is about 390 files and over 10,000 lines and had to be rewritten per version; some behaviour changes, as upstream, such as what happens at the memory limit; release notes need a subscription. It plans a hardening patch for related issues found during verification and a check of PECL modules. Commercial and promotional in tone.

> ESIの調査で、原因となる作りが保守終了版のPHP 5.3～8.1のすべてにあることを確認しました。

_Curator's translation:_ "ESI's investigation confirmed that the underlying construction exists in all the end-of-life PHP versions 5.3 to 8.1."

Why it is here

From the promotion queue (index/promote.json, priority 4): Mentions CVE-2026-109618/109619 or php2shell: "PHPセキュリティ延長保守サービス、 PHP2Shellの修正を保守終了版PHP 5.3～8.1に提供 | エレクトロニック・サービス・イニシアチブ有限会社". Selected mechanically, not read by a person.

Capture notes

Language ja. Nothing in the page addresses an AI or hides text from a reader.