{"id":804,"date":"2026-10-22T17:55:54","date_gmt":"2026-10-22T09:55:54","guid":{"rendered":"http:\/\/znl.pub\/?p=804"},"modified":"2026-10-22T17:55:54","modified_gmt":"2026-10-22T09:55:54","slug":"php-rce-cve-2026-109618-fix","status":"publish","type":"post","link":"https:\/\/znl.pub\/?p=804","title":{"rendered":"\u4fee\u590d PHP \u6838\u5f39\u7ea7 RCE \u6f0f\u6d1e\u5b9e\u5f55\uff1a\u4ece 8.3.8 \u5230 8.5.12\uff0c\u4ee5\u53ca\u6211\u8e29\u8fc7\u7684 7 \u4e2a\u5751"},"content":{"rendered":"<h2>\u8d77\u56e0\uff1a\u4e00\u4e2a CVSS 9.2 \u7684\u6838\u5f39\u7ea7\u6f0f\u6d1e<\/h2>\n<p>2026 \u5e74 10 \u6708 21 \u65e5\uff0cPHP \u5b89\u5168\u56e2\u961f\u53d1\u5e03\u7d27\u6025\u4fee\u590d\uff0c\u4e00\u6b21\u5835\u4e0a\u4e24\u4e2a\u53ef\u88ab\u672a\u8ba4\u8bc1\u8fdc\u7a0b\u5229\u7528\u7684 RCE \u6f0f\u6d1e\uff1a<\/p>\n<ul>\n<li><strong>CVE-2026-109618<\/strong>\uff08GHSA-w8hw-w9fx-j79w\uff09\uff1aOOM \u5904\u7406\u8def\u5f84\u7684\u5185\u5b58\u7834\u574f\u3002PHP \u7528 longjmp() \u4e2d\u6b62\u8d85\u51fa\u5185\u5b58\u4e0a\u9650\u7684\u8bf7\u6c42\uff0c\u53ef\u80fd\u6253\u65ad\u5185\u90e8\u6570\u636e\u7684\u521d\u59cb\u5316\uff1b\u968f\u540e\u7684\u8bf7\u6c42\u6e05\u7406\u4f1a\u628a\u65e0\u6548\u6570\u636e\u5f53\u4f5c\u6709\u6548\u6570\u636e\u91ca\u653e\uff0c\u800c\u90a3\u5757\u5185\u5b58\u91cc\u53ef\u80fd\u8fd8\u7559\u7740\u653b\u51fb\u8005\u53ef\u63a7\u7684\u5185\u5bb9\u3002<\/li>\n<li><strong>CVE-2026-109619<\/strong>\uff08GHSA-6wmf-4rv5-p3rp\uff09\uff1a\u8bf7\u6c42\u5185\u5b58\u91ca\u653e\u540e\u6b8b\u7559\u7684\u5168\u5c40\u72b6\u6001\u3002\u67d0\u4e2a\u8bf7\u6c42\u62e5\u6709\u7684\u5185\u90e8\u72b6\u6001\u5728\u5176\u5185\u5b58\u88ab\u91ca\u653e\u540e\u4ecd\u7136\u5b58\u6d3b\uff0c\u540c\u4e00\u4e2a worker \u5904\u7406\u7684\u540e\u7eed\u8bf7\u6c42\u4f1a\u5728\u6b63\u5e38\u521d\u59cb\u5316\u91cd\u7f6e\u5b83\u4e4b\u524d\uff0c\u8bfb\u5230\u8fd9\u4efd&#8221;\u9648\u65e7\u72b6\u6001&#8221;\u3002<\/li>\n<\/ul>\n<p>\u4e24\u8005\u7ec4\u5408\u8d77\u6765\u5c31\u662f\uff1a<strong>\u4e00\u4e2a\u672a\u7ecf\u8eab\u4efd\u9a8c\u8bc1\u7684 HTTP \u8bf7\u6c42\uff0c\u5728\u5e94\u7528\u4ee3\u7801\u6267\u884c\u4e4b\u524d\u5c31\u53ef\u80fd\u62ff\u4e0b\u670d\u52a1\u5668<\/strong>\u3002\u6280\u672f\u7ec6\u8282\u4e0e PoC \u5728\u53d1\u5e03\u540e\u8fc5\u901f\u6d41\u4f20\uff0cHKCERT \u5df2\u786e\u8ba4\u5b58\u5728\u5728\u91ce\u5229\u7528\u3002<\/p>\n<p>\u5f71\u54cd\u8303\u56f4\uff1aPHP 5.4 \u81f3 8.5.11\u3002\u4fee\u590d\u7248\u672c\uff1a<strong>8.5.12 \/ 8.4.27 \/ 8.3.36 \/ 8.2.35<\/strong>\u30028.1 \u53ca\u66f4\u65e9\u7684\u5206\u652f\u4e0d\u518d\u6709\u4fee\u590d\u3002<\/p>\n<p>\u672c\u6587\u8bb0\u5f55\u8fd9\u6b21\u5e94\u6025\u5904\u7f6e\u7684\u5b8c\u6574\u8fc7\u7a0b\uff0c\u91cd\u70b9\u662f\u6211\u8e29\u8fc7\u7684\u5751\u2014\u2014\u5176\u4e2d\u7b2c\u4e00\u4e2a\u5751\uff0c\u8ba9\u6211\u540e\u80cc\u53d1\u51c9\u3002<\/p>\n<h2>\u73af\u5883\u7ea6\u675f\uff1a\u4e3a\u4ec0\u4e48\u4e0d\u80fd\u4e00\u628a\u68ad\u5347\u7ea7<\/h2>\n<p>\u624b\u4e0a\u7684\u673a\u5668\u662f\u4e00\u53f0 1.7GB \u5185\u5b58\u7684\u5c0f\u9e21\uff0cPHP 8.3.8 \u7531\u6e90\u7801\u7f16\u8bd1\u5b89\u88c5\u5728 \/usr\/local\uff0c\u7cfb\u7edf\u5305\u7ba1\u7406\u5668\u548c PHP \u7248\u672c\u5df2\u7ecf\u8131\u94a9\uff1b\u751f\u4ea7\u4e0a\u8dd1\u7740 WordPress \u4e3b\u7ad9\u3001\u4e00\u4e2a\u9759\u6001\u7ad9\u548c\u4e00\u4e2a\u53cd\u5411\u4ee3\u7406\u7ad9\u70b9\u3002<\/p>\n<p>\u770b\u8d77\u6765&#8221;\u5347\u4e2a\u7ea7\u5c31\u884c&#8221;\u7684\u4e8b\u60c5\uff0c\u5b9e\u9645\u6709\u4e09\u4e2a\u786c\u7ea6\u675f\uff1a<\/p>\n<ol>\n<li><strong>\u65e0\u5305\u53ef\u5347<\/strong>\uff1aAlpine \u4ed3\u5e93\u91cc\u6ca1\u6709\u5bf9\u5e94 PHP \u5305\uff0capk \u8def\u7ebf\u8d70\u4e0d\u901a\uff1b<\/li>\n<li><strong>\u4e0a\u6e38\u955c\u50cf\u5df2\u5f03\u66f4<\/strong>\uff1a\u5e38\u7528\u7684 tangramor\/nginx-php8-fpm \u955c\u50cf\uff0c8.3 \u7ebf\u6700\u65b0 tag \u8fd8\u505c\u7559\u5728 php8.3.13\uff0c\u4f4e\u4e8e\u4fee\u590d\u6240\u9700\u7684 8.3.36\uff0c\u8be5\u955c\u50cf\u5df2\u8f6c\u5411 8.4\/8.5 \u5206\u652f\uff1b<\/li>\n<li><strong>\u5185\u5b58\u4e0d\u591f<\/strong>\uff1a1.7GB \u7684\u673a\u5668\u4e0a\u6e90\u7801\u7f16\u8bd1 PHP\uff08\u5cf0\u503c 2GB+\uff09\u4f1a\u76f4\u63a5 OOM \u5931\u8d25\u3002<\/li>\n<\/ol>\n<p>\u7ed3\u8bba\uff1a\u552f\u4e00\u5f7b\u5e95\u4e14\u53ef\u884c\u7684\u8def\u5f84\uff0c\u662f\u57fa\u4e8e\u5b98\u65b9 <code>php:8.5.12-fpm-alpine<\/code> \u955c\u50cf\u81ea\u5efa\uff0c\u7f16\u8bd1 WordPress \u6240\u9700\u6269\u5c55\u3002<\/p>\n<h2>\u65b9\u6848\uff1a\u5b98\u65b9\u57fa\u7840\u955c\u50cf + \u81ea\u7f16\u8bd1\u6269\u5c55<\/h2>\n<p>\u9009\u62e9\u5b98\u65b9 docker-library \u955c\u50cf\u800c\u4e0d\u662f\u7b2c\u4e09\u65b9&#8221;\u5168\u5bb6\u6876&#8221;\u955c\u50cf\uff0c\u7406\u7531\u5f88\u76f4\u63a5\uff1a<strong>\u4fe1\u4efb\u94fe\u66f4\u77ed<\/strong>\u3002\u5b98\u65b9\u955c\u50cf\u7531 docker-library \u4e13\u4e1a\u7ef4\u62a4\uff0c\u800c\u6211\u53ea\u9700\u8981\u5728\u4e0a\u9762\u8865 5 \u4e2a WordPress \u5fc5\u9700\u7684\u6269\u5c55\uff1amysqli\u3001pdo_mysql\u3001gd\u3001zip\u3001exif\u3001intl\u3002<\/p>\n<p>\u955c\u50cf\u4f9b\u5e94\u94fe\u4e0a\u505a\u4e86\u4e00\u5c42\u6821\u9a8c\uff1a\u670d\u52a1\u5668\u65e0\u6cd5\u76f4\u8fde Docker Hub\uff08\u539f\u56e0\u89c1\u5751 3\uff09\uff0c\u53ea\u80fd\u8d70\u7b2c\u4e09\u65b9\u955c\u50cf\u6e90\u3002\u4e3a\u786e\u8ba4\u62ff\u5230\u7684\u5c31\u662f\u5b98\u65b9\u539f\u7248\uff0c\u6211\u4ece\u4e24\u4e2a\u72ec\u7acb\u8fd0\u8425\u7684\u955c\u50cf\u6e90\u5206\u522b\u62c9\u53d6\u540c\u4e00 tag\uff0c\u6bd4\u5bf9 manifest \u6458\u8981\uff0c\u5b8c\u5168\u4e00\u81f4\u624d\u91c7\u7528\uff1a<\/p>\n<pre><code>daocloud: sha256:4943e6c8a08008605b470f6171d611a89384bac97188e4b0a7aefd3f793cd040\n1ms.run  : sha256:4943e6c8a08008605b470f6171d611a89384bac97188e4b0a7aefd3f793cd040<\/code><\/pre>\n<p>Dockerfile \u7684\u6838\u5fc3\u90e8\u5206\uff1a<\/p>\n<pre><code>FROM php:8.5.12-fpm-alpine\n\n# \u8fd0\u884c\u65f6\u5e93\u5fc5\u987b\u5e38\u89c4\u5b89\u88c5\uff08\u5199\u5165 world\uff09\uff0c\u4e0d\u80fd\u53ea\u4f5c\u4e3a -dev \u5305\u7684\u4f9d\u8d56\u5b58\u5728\nRUN sed -i 's|https:\/\/dl-cdn.alpinelinux.org\/alpine|https:\/\/mirrors.aliyun.com\/alpine|g' \/etc\/apk\/repositories \n    &amp;&amp; apk add --no-cache nginx tzdata \n        libpng libjpeg-turbo libwebp freetype libzip icu-libs \n    &amp;&amp; apk add --no-cache --virtual .build-deps $PHPIZE_DEPS \n        libpng-dev libjpeg-turbo-dev libwebp-dev freetype-dev \n        libzip-dev icu-dev\n\nRUN docker-php-ext-install -j$(nproc) mysqli pdo_mysql gd zip exif intl\n\n# \u6e05\u7406\u65f6\u53ea\u5220 virtual \u5305\uff0c\u8fd0\u884c\u65f6\u5e93\u4e0d\u53d7\u5f71\u54cd\nRUN apk del .build-deps<\/code><\/pre>\n<h2>\u8e29\u5751\u8bb0\u5f55<\/h2>\n<h3>\u5751 1\uff1a\u4fee\u590d\u7248\u7248\u672c\u53f7\u9677\u9631\uff08\u6700\u5371\u9669\u7684\u4e00\u4e2a\uff09<\/h3>\n<p>\u6211\u6700\u521d\u90e8\u7f72\u7684\u662f PHP 8.5.4\u2014\u2014\u7406\u7531\u542c\u8d77\u6765\u5f88\u5145\u5206\uff1a&#8221;8.5 \u662f\u5f53\u524d\u6700\u65b0\u5927\u7248\u672c\u7ebf\uff0c\u62c9\u4e2a\u5927\u7248\u672c\u7ebf\u91cc\u6700\u65b0\u7684\u5c31\u884c&#8221;\u3002<\/p>\n<p>\u76f4\u5230\u6536\u5c3e\u5bf9\u8d26\u65f6\uff0c\u6211\u6ce8\u610f\u5230\u955c\u50cf\u7684\u6784\u5efa\u65e5\u671f\uff1a<strong>2026-03-12<\/strong>\u3002\u800c\u8865\u4e01\u7684\u53d1\u5e03\u65e5\u671f\u662f <strong>2026-10-21<\/strong>\u3002\u4e00\u4e2a 3 \u6708\u6784\u5efa\u7684\u4e8c\u8fdb\u5236\uff0c\u600e\u4e48\u53ef\u80fd\u5305\u542b 10 \u6708\u624d\u53d1\u5e03\u7684\u4fee\u590d\uff1f<\/p>\n<p>\u67e5\u8bc1\u4e4b\u540e\u786e\u8ba4\uff1a\u4fee\u590d\u7248\u662f 8.5.12\uff0c8.5.11 \u53ca\u4e4b\u524d\u7684 8.5.x \u5168\u90e8\u53d7\u5f71\u54cd\u3002\u6211\u90e8\u7f72\u7684 8.5.4\uff0c\u6b63\u5728\u53d7\u5f71\u54cd\u540d\u5355\u91cc\u3002<\/p>\n<p><strong>\u6559\u8bad\uff1a\u4fee\u590d\u7248\u672c\u53f7\u5fc5\u987b\u4ee5\u5b98\u65b9\u516c\u544a\u4e3a\u51c6\uff0c&#8221;\u6700\u65b0\u5927\u7248\u672c\u7ebf&#8221;\u4e0d\u7b49\u4e8e&#8221;\u5df2\u4fee\u590d&#8221;\u3002<\/strong>\u540e\u6765\u6211\u52a0\u4e86\u4e00\u9053\u5bf9\u8d26\u5de5\u5e8f\u2014\u2014\u62ff\u955c\u50cf\u6784\u5efa\u65e5\u671f\u548c\u8865\u4e01\u53d1\u5e03\u65e5\u671f\u505a\u4ea4\u53c9\u9a8c\u8bc1\uff0c\u8fd9\u4e2a\u7b28\u529e\u6cd5\u8fd9\u6b21\u6551\u4e86\u547d\u3002<\/p>\n<h3>\u5751 2\uff1aapk del .build-deps \u7684\u9690\u5f62\u8fde\u5e26\u4f24\u5bb3<\/h3>\n<p>\u7b2c\u4e00\u4e2a\u955c\u50cf\u6784\u5efa&#8221;\u6210\u529f&#8221;\u4e86\uff0c\u4f46\u542f\u52a8\u65f6 PHP \u62a5\u8b66\uff1agd\u3001intl\u3001zip \u4e09\u4e2a\u6269\u5c55\u65e0\u6cd5\u52a0\u8f7d\uff0c\u63d0\u793a\u7f3a libpng16.so.16\u3001libicuio.so.76\u3001libzip.so.5\u3002<\/p>\n<p>\u539f\u56e0\u5f88\u5178\u578b\uff1a\u7f16\u8bd1\u8fd9\u4e9b\u6269\u5c55\u9700\u8981 libpng-dev\u3001icu-dev\u3001libzip-dev \u7b49 -dev \u5305\uff0c\u800c\u8fd9\u4e9b -dev \u5305\u4f1a\u628a\u5bf9\u5e94\u7684\u8fd0\u884c\u65f6\u5e93\u4f5c\u4e3a\u4f9d\u8d56\u62c9\u8fdb\u6765\uff1b\u6700\u540e\u4e00\u6b65 <code>apk del .build-deps<\/code> \u6e05\u7406\u65f6\uff0c\u8fd0\u884c\u65f6\u5e93\u4f5c\u4e3a&#8221;\u4e0d\u518d\u88ab\u663e\u5f0f\u9700\u8981\u7684\u4f9d\u8d56&#8221;\u88ab\u4e00\u5e76\u5220\u6389\u4e86\u3002<\/p>\n<p><strong>\u89e3\u6cd5<\/strong>\uff1a\u8fd0\u884c\u65f6\u5e93\u7528\u72ec\u7acb\u7684 <code>apk add --no-cache<\/code> \u5b89\u88c5\uff08\u5199\u5165 world \u6570\u636e\u5e93\uff09\uff0c-dev \u5305\u8d70 <code>--virtual<\/code>\uff0c\u6e05\u7406\u65f6\u53ea\u5220 virtual \u5305\u3002Dockerfile \u91cc\u8fd9\u56db\u884c\u987a\u5e8f\uff0c\u503c\u4e00\u6b21 OOM \u7684\u5b66\u8d39\u3002<\/p>\n<h3>\u5751 3\uff1aDocker Hub \u7684\u4e09\u91cd\u5c01\u9501<\/h3>\n<p>\u670d\u52a1\u5668\u5b8c\u5168\u8fde\u4e0d\u4e0a Docker Hub\uff0c\u5c42\u5c42\u6392\u67e5\u540e\u53d1\u73b0\u662f\u4e09\u91cd\u5c01\u9501\uff1a<\/p>\n<ol>\n<li><strong>DNS \u6c61\u67d3<\/strong>\uff1aregistry-1.docker.io \u88ab\u89e3\u6790\u5230 Facebook \u7684 IPv6 \u5730\u5740\uff1b<\/li>\n<li>\u5373\u4f7f\u628a\u771f\u5b9e IP \u5199\u8fdb \/etc\/hosts \u4fee\u6b63\u89e3\u6790\uff0c\u8fde\u63a5\u4f9d\u7136\u88ab reset\u2014\u2014\u57fa\u4e8e SNI \u7684\u57df\u540d\u963b\u65ad\uff1b<\/li>\n<li>\u6240\u6709\u5b98\u65b9 IP \u6bb5\u6d4b\u8bd5\u4e0b\u6765\u65e0\u4e00\u5e78\u514d\u3002<\/li>\n<\/ol>\n<p>\u7ed3\u8bba\uff1a\u53ea\u80fd\u8d70\u7b2c\u4e09\u65b9\u955c\u50cf\u6e90\u3002\u4f46\u7b2c\u4e09\u65b9\u6e90\u610f\u5473\u7740\u4f9b\u5e94\u94fe\u98ce\u9669\u2014\u2014\u955c\u50cf\u63d0\u4f9b\u65b9\u5b8c\u5168\u53ef\u4ee5\u690d\u5165\u540e\u95e8\u3002\u89e3\u6cd5\u662f<strong>\u53cc\u6e90\u4ea4\u53c9\u9a8c\u8bc1<\/strong>\uff08\u89c1\u4e0a\u6587\uff09\uff0c\u4e24\u4e2a\u72ec\u7acb\u8fd0\u8425\u7684\u6e90\u8fd4\u56de\u5b8c\u5168\u4e00\u81f4\u7684 manifest \u6458\u8981\uff0c\u624d\u8ba4\u5b9a\u5185\u5bb9\u53ef\u4fe1\u3002\u8fd9\u6bd4\u4fe1\u4efb\u4efb\u4f55\u5355\u4e00\u7b2c\u4e09\u65b9\u6e90\u90fd\u53ef\u9760\u3002<\/p>\n<h3>\u5751 4\uff1aAlpine \u5b98\u65b9 CDN \u7684\u9f9f\u901f<\/h3>\n<p>\u641e\u5b9a\u4e86\u955c\u50cf\u6e90\uff0c\u4e0b\u4e00\u4e2a\u74f6\u9888\u662f Alpine \u5305\u6e90\uff1adl-cdn.alpinelinux.org \u5b9e\u6d4b\u53ea\u6709 15KB\/s\uff0c\u88c5\u4e00\u8f6e\u6784\u5efa\u4f9d\u8d56\u8981 20 \u5206\u949f\u4ee5\u4e0a\u3002<\/p>\n<p>\u89e3\u6cd5\uff1a\u5728 Dockerfile \u91cc\u628a \/etc\/apk\/repositories \u66ff\u6362\u4e3a\u963f\u91cc\u4e91\u6e90\uff084MB\/s\uff09\u3002\u53ef\u80fd\u6709\u540c\u5b66\u4f1a\u95ee\uff1a\u6362\u6e90\u5b89\u5168\u5417\uff1f\u5b89\u5168\u2014\u2014<strong>APK \u5305\u7531 Alpine \u5b98\u65b9\u7b7e\u540d\uff0capk \u5b89\u88c5\u65f6\u4f1a\u9a8c\u7b7e<\/strong>\uff0c\u4f20\u8f93\u6e90\u53ea\u5f71\u54cd\u901f\u5ea6\uff0c\u4e0d\u5f71\u54cd\u5b8c\u6574\u6027\u3002\u8fd9\u4e0e\u5751 3 \u7684\u955c\u50cf\u6458\u8981\u6821\u9a8c\u662f\u4e24\u4e2a\u72ec\u7acb\u7684\u4fe1\u4efb\u673a\u5236\uff0c\u6b63\u597d\u4e92\u76f8\u5370\u8bc1\u3002<\/p>\n<h3>\u5751 5\uff1a\u5c0f\u5185\u5b58\u673a\u5668\u7684 FPM \u8fdb\u7a0b\u6570\u70b8\u5f39<\/h3>\n<p>\u6392\u67e5\u73b0\u7f51\u914d\u7f6e\u65f6\u53d1\u73b0\u4e00\u4e2a\u9690\u85cf\u98ce\u9669\uff1aFPM \u6c60 <code>pm.max_children = 64<\/code>\uff0c\u800c <code>memory_limit = 128M<\/code>\u2014\u2014\u7406\u8bba\u5cf0\u503c\u5185\u5b58\u9700\u6c42 8GB\uff0c\u7269\u7406\u5185\u5b58\u53ea\u6709 1.7GB\u3002\u4e00\u6ce2\u5e76\u53d1\u6162\u8bf7\u6c42\u5c31\u80fd\u628a\u6574\u673a OOM \u6740\u6389\u3002<\/p>\n<p>\u8c03\u6574\u4e3a <code>pm.max_children = 12<\/code>\uff08\u52a8\u6001\u6c60\uff0cstart 3 \/ spare 2-6\uff09\uff0c\u5b9e\u6d4b\u65b0\u5bb9\u5668\u7a33\u5b9a\u8fd0\u884c\u5728 55MB \u5de6\u53f3\u3002\u8c03\u53c2\u7684\u4f9d\u636e\u662f\u7269\u7406\u5185\u5b58\uff0c\u4e0d\u662f\u6284\u6765\u7684&#8221;\u6700\u4f73\u5b9e\u8df5&#8221;\u3002<\/p>\n<h3>\u5751 6\uff1apkill -f \u4f1a\u6740\u6b7b\u4f60\u81ea\u5df1<\/h3>\n<p>\u60f3\u6740\u6389\u4e00\u4e2a\u8dd1\u504f\u7684\u540e\u53f0\u6784\u5efa\u8fdb\u7a0b\uff0c<code>pkill -f 'docker build'<\/code> \u6572\u4e0b\u53bb\uff0cSSH \u8fde\u63a5\u77ac\u95f4\u65ad\u5f00\u2014\u2014\u56e0\u4e3a\u8fd9\u4e2a\u6a21\u5f0f\u5339\u914d\u5230\u4e86\u6211\u81ea\u5df1\u7684 SSH \u8fdc\u7a0b\u547d\u4ee4\u884c\uff08\u6574\u6761\u547d\u4ee4\u91cc\u5c31\u5305\u542b &#8220;docker build&#8221; \u8fd9\u51e0\u4e2a\u5b57\uff09\u3002<\/p>\n<p>\u89e3\u6cd5\uff1a\u6a21\u5f0f\u91cc\u52a0\u4e00\u4e2a\u5b57\u7b26\u7c7b\u7a7a\u683c\uff0c<code>pkill -f 'docker[ ]build'<\/code>\uff0c\u5339\u914d\u4e0d\u5230\u81ea\u8eab\u547d\u4ee4\u884c\u3002<\/p>\n<h3>\u5751 7\uff1anohup \u540e\u53f0\u4efb\u52a1\u5fd8\u4e86 cd<\/h3>\n<p>\u53e6\u4e00\u4e2a\u540c\u6837\u7b28\u7684\u5c0f\u5751\uff1a\u540e\u53f0\u542f\u52a8\u6784\u5efa\u65f6\u7701\u7565\u4e86 cd \u5de5\u4f5c\u76ee\u5f55\uff0c\u6784\u5efa\u9759\u9ed8\u5931\u8d25\u4e8e <code>open Dockerfile: no such file or directory<\/code>\u3002nohup \u7684\u6bcf\u6761\u547d\u4ee4\u90fd\u503c\u5f97\u663e\u5f0f\u5199\u5168\u5de5\u4f5c\u76ee\u5f55\u3002<\/p>\n<h2>\u53ef\u590d\u7528\u7684\u5e94\u6025\u5904\u7f6e\u6e05\u5355<\/h2>\n<p>\u6309\u65f6\u95f4\u987a\u5e8f\uff0c\u8fd9\u6b21\u5904\u7f6e\u7684\u5b8c\u6574\u52a8\u7ebf\uff1a<\/p>\n<ol>\n<li><strong>\u6838\u5b9e&#8221;\u4fee\u590d\u7248&#8221;\u7684\u51c6\u786e\u7248\u672c\u53f7<\/strong>\u2014\u2014\u4ee5\u5b98\u65b9\u516c\u544a\/CNVD \u4e3a\u51c6\uff0c\u62d2\u7edd\u4efb\u4f55\u4e8c\u624b\u8f6c\u8ff0\uff1b<\/li>\n<li><strong>\u5907\u4efd\u5148\u884c<\/strong>\uff1a\u6570\u636e\u5e93 dump\u3001nginx \u914d\u7f6e\u3001compose \u6587\u4ef6\u3001\u5bb9\u5668 inspect \u5168\u91cf\u5b58\u6863\uff1b<\/li>\n<li><strong>\u5f71\u5b50\u5bb9\u5668\u9a8c\u8bc1<\/strong>\uff1a\u5907\u7528\u7aef\u53e3\uff088080\/8443\uff09+ \u53ea\u8bfb\u6302\u8f7d\uff0c\u73b0\u7f51\u65e0\u611f\uff0c\u9a8c\u8bc1\u901a\u8fc7\u518d\u5207\u6362\uff1b<\/li>\n<li><strong>\u4f9b\u5e94\u94fe\u6821\u9a8c<\/strong>\uff1a\u955c\u50cf\u62c9\u53d6\u8d70\u53cc\u6e90\u6458\u8981\u4ea4\u53c9\u9a8c\u8bc1\uff1b<\/li>\n<li><strong>\u6b63\u5f0f\u5207\u6362<\/strong>\uff1a\u6539 compose \u955c\u50cf tag \u91cd\u5efa\u5bb9\u5668\uff0c\u4e2d\u65ad\u4ee5\u79d2\u8ba1\uff1b<\/li>\n<li><strong>\u5192\u70df\u6d4b\u8bd5<\/strong>\uff1a\u4e09\u4e2a\u7ad9\u70b9\u7ecf\u771f\u5b9e\u57df\u540d\u8bbf\u95ee\uff0c\u786e\u8ba4 200 \u4e0e\u5185\u5bb9\u5b8c\u6574\uff1b<\/li>\n<li><strong>\u5bf9\u8d26\u590d\u76d8<\/strong>\uff1a\u6784\u5efa\u65e5\u671f vs \u8865\u4e01\u53d1\u5e03\u65e5\u671f\uff0c\u786e\u8ba4\u90e8\u7f72\u7684\u771f\u7684\u662f\u4fee\u590d\u7248\uff1b<\/li>\n<li><strong>\u4fdd\u7559\u56de\u6eda\u8d44\u4ea7<\/strong>\uff1a\u65e7\u955c\u50cf + \u65e7 compose + \u6570\u636e\u5e93 dump\uff0c\u4e00\u6761\u547d\u4ee4\u5207\u56de\u3002<\/li>\n<\/ol>\n<p>\u53e6\u5916\uff0c\u8865\u4e01\u5230\u4f4d\u524d\u7684\u7a97\u53e3\u671f\uff0c\u6309 CERT-EU \u5efa\u8bae\u5bf9\u751f\u4ea7\u65bd\u52a0\u4e86\u4e34\u65f6\u7f13\u89e3\uff08memory_limit=-1 \u5c01\u5835 OOM \u89e6\u53d1\u8def\u5f84\u3001session.upload_progress=0\u3001post_max_size=32M\uff09\uff0c\u8865\u4e01\u5207\u6362\u540e\u5373\u6062\u590d\u6b63\u5e38\u5185\u5b58\u7b56\u7565\u3002<\/p>\n<h2>\u7ed3\u8bed<\/h2>\n<p>\u8fd9\u6b21\u5904\u7f6e\u6700\u5927\u7684\u6536\u83b7\uff0c\u662f\u5751 1 \u90a3\u79cd&#8221;\u7248\u672c\u53f7\u5dee\u51e0\u4e2a\u6708&#8221;\u7684\u9677\u9631\u2014\u2014\u6280\u672f\u4e0a\u90fd\u5bf9\uff0c\u7ec4\u5408\u8d77\u6765\u5374\u7b49\u4e8e\u6ca1\u6253\u8865\u4e01\u3002\u57fa\u7840\u8bbe\u65bd\u7684\u5bf9\u8d26\u503c\u5f97\u505a\u4e24\u904d\uff1a\u4e00\u904d\u5728\u90e8\u7f72\u524d\uff0c\u4e00\u904d\u5728\u90e8\u7f72\u540e\u3002<\/p>\n<p>\u6240\u6709\u8e29\u8fc7\u7684\u5751\u90fd\u5df2\u5f52\u6863\u8fdb\u6784\u5efa\u76ee\u5f55\u7684 Dockerfile \u6ce8\u91ca\u91cc\uff0c\u4e0b\u6b21\u91cd\u5efa\u4e0d\u4f1a\u91cd\u8e48\u8986\u8f99\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u8d77\u56e0\uff1a\u4e00\u4e2a CVSS 9.2 \u7684\u6838\u5f39\u7ea7\u6f0f\u6d1e 2026 \u5e74 10 \u6708 21 \u65e5\uff0cPHP \u5b89\u5168\u56e2\u961f\u53d1\u5e03\u7d27\u6025\u4fee\u590d\uff0c\u4e00&#8230;<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[18,21],"tags":[36,38,34,35,39,37],"class_list":["post-804","post","type-post","status-publish","format-standard","hentry","category-docker","category-php","tag-cve","tag-docker","tag-php","tag-35","tag-39","tag-37"],"_links":{"self":[{"href":"https:\/\/znl.pub\/index.php?rest_route=\/wp\/v2\/posts\/804","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/znl.pub\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/znl.pub\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/znl.pub\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/znl.pub\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=804"}],"version-history":[{"count":0,"href":"https:\/\/znl.pub\/index.php?rest_route=\/wp\/v2\/posts\/804\/revisions"}],"wp:attachment":[{"href":"https:\/\/znl.pub\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=804"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/znl.pub\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=804"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/znl.pub\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=804"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}