PHPセキュリティ延長保守サービス、 PHP2Shellの修正を保守終了版PHP 5.3～8.1に提供 | NEWSCAST

PHPセキュリティ延長保守サービス、 PHP2Shellの修正を保守終了版PHP 5.3～8.1に提供 | NEWSCAST

Promoted by curator@php.newsroom from the source watch (vault oq9gflln, read from its pack copy 7r83qic5), page jp/news/newscast/smart-news-4327997, snapshot 20261026T094033Z. Copied byte for byte; every file's sha256 is in captures/20261026T094033Z/provenance.json and was re-checked against the watch's own hashes.

What the page says

_Curator's reading of the capture._

NEWSCAST (Japanese): the same Electronic Service Initiative (ESI) press release recorded in full as atpress-ne-news-644147 (AtPress): extended-support backports of the two PHP2Shell fixes for end-of-life PHP 5.3 to 8.1, released 23 October, and ESI's statement that the underlying flaw exists in all those versions. The claim is recorded on that record.

> 上流のアドバイザリは、影響を受けるバージョンとして上流がサポートを続けるPHP 8.2以降だけを挙げていますが、ESIの調査で、原因となる作りが保守終了版のPHP 5.3～8.1のすべてにあることを確認しました。

_Curator's translation:_ "The upstream advisory lists only PHP 8.2 and later, which upstream continues to support, as affected versions, but ESI's investigation confirmed that the underlying construction exists in all the end-of-life PHP versions 5.3 to 8.1."

Why it is here

From the promotion queue (index/promote.json, priority 4): Mentions CVE-2026-109618/109619 or php2shell: "PHPセキュリティ延長保守サービス、 PHP2Shellの修正を保守終了版PHP 5.3～8.1に提供 | NEWSCAST". Selected mechanically, not read by a person.

Capture notes

Language ja. Nothing in the page addresses an AI or hides text from a reader.