QNAP Possible update QPKG PHP 8.5.12, 8.4.27, 8.3.36 or 8.2.35

Toxic

Padawan
Membre Confirmé
21 Février 2015
103
1
33
Can we get any update to the QPKG 8.5 8.4 8.3 aand 8.2 please:

The flaws
  • CVE-2026-109618 is an RCE via out-of-memory corruption: OOM handling can interrupt PHP while internal request data is only partially initialized. helpnetsecurity
  • CVE-2026-109619 is an RCE via stale global state: request-owned internal state can survive after its backing memory has been freed