# Source: PHPセキュリティ延長保守サービス、 PHP2Shellの修正を保守終了版PHP 5.3～8.1に提供 | NEWSCAST

> Research: collected from outside sources and what this site derives from them; every fact links to a saved copy of its source.

NEWSCAST: what it says, the claims and events that cite it, and the hashes of every captured file.

Source · news · secondary · captured

# PHPセキュリティ延長保守サービス、 PHP2Shellの修正を保守終了版PHP 5.3～8.1に提供 | NEWSCAST

**NEWSCAST** · [https://newscast.jp/smart/news/4327997](https://newscast.jp/smart/news/4327997) · published 2026-10-26 15:15 (page time zone not stated) · added by `curator@php.newsroom` · slug `newscast-smart-news-4327997`

Promoted from the source watch (pack copy 7r83qic5), snapshot 20261026T094033Z, queue priority 4 (mechanical selection by researcher@php.newsroom, read by the curator). NEWSCAST (Japanese): the same Electronic Service Initiative (ESI) press release recorded in full as atpress-ne-news-644147 (AtPress): extended-support...

## What it says, as the collector read it

#### PHPセキュリティ延長保守サービス、 PHP2Shellの修正を保守終了版PHP 5.3～8.1に提供 | NEWSCAST

Promoted by curator@php.newsroom from the source watch (vault `oq9gflln`, read from its pack copy `7r83qic5`), page `jp/news/newscast/smart-news-4327997`, snapshot `20261026T094033Z`. Copied byte for byte; every file's sha256 is in `captures/20261026T094033Z/provenance.json` and was re-checked against the watch's own hashes.

#### What the page says

_Curator's reading of the capture._

NEWSCAST (Japanese): the same Electronic Service Initiative (ESI) press release recorded in full as atpress-ne-news-644147 (AtPress): extended-support backports of the two PHP2Shell fixes for end-of-life PHP 5.3 to 8.1, released 23 October, and ESI's statement that the underlying flaw exists in all those versions. The claim is recorded on that record.

> 上流のアドバイザリは、影響を受けるバージョンとして上流がサポートを続けるPHP 8.2以降だけを挙げていますが、ESIの調査で、原因となる作りが保守終了版のPHP 5.3～8.1のすべてにあることを確認しました。

_Curator's translation:_ "The upstream advisory lists only PHP 8.2 and later, which upstream continues to support, as affected versions, but ESI's investigation confirmed that the underlying construction exists in all the end-of-life PHP versions 5.3 to 8.1."

#### Why it is here

From the promotion queue (`index/promote.json`, priority 4): Mentions CVE-2026-109618/109619 or php2shell: "PHPセキュリティ延長保守サービス、 PHP2Shellの修正を保守終了版PHP 5.3～8.1に提供 | NEWSCAST". Selected mechanically, not read by a person.

#### Capture notes

Language `ja`. Nothing in the page addresses an AI or hides text from a reader.

## Claims that cite it

No claim cites this source yet.

## Events that cite it

No timeline event cites this source yet.

## The bytes
capture 20261026T094033Z · HTTP 200 · https://newscast.jp/smart/news/4327997- `headers.json` 265213f6d88a54c9f8ab39cb1e607715257ccb7b07b226c8ff0a2a62480612e6 908 bytes
- `page.html` edfaa4348f2a12093628f165e71e95acb55c8a56eb040177ff2b8daf21911a0e 69,889 bytes
- `provenance.json` 8abce7ce196ff5873e17fe0e19a6537394c7374f5ee0fe9a9b914d6be6c5e94b 1,602 bytes
- `rendered.html` 34e55f5998b2a83df31183df51173491529a2853738737dd0592b26bda2f6ba7 63,894 bytes
- `screenshot.jpg` a1e0ed750a0b96e3cf87862223a0cca5f9b24748fe67e754e602a6193a31d4a6 296,506 bytes
- `text.txt` a1a091050c738ac23fb15c5e66c448c8a98ebb6fad82da6cd4dbba615cf65556 5,574 bytes

The captured files are held privately in the evidence vault and are not republished; the hashes above are what the vault recorded at capture time. [Every source →](../index.html)


---
site v0.22.36 · data as of 2026-10-26T17:09Z · vault commit 1dceaa1dfa7f · https://refs.php.oct.2026.newsroom.sgit.ai/sources/newscast-smart-news-4327997/index.html