{"id":183943,"date":"2026-10-22T05:40:56","date_gmt":"2026-10-22T03:40:56","guid":{"rendered":"https:\/\/prohoster.info\/blog\/news\/raskryty-detali-kriticheskih-uyazvimostej-v-php-i-opublikovany-korrektiruyushhie-obnovleniya"},"modified":"2026-10-22T05:41:02","modified_gmt":"2026-10-22T03:41:02","slug":"details-of-critical-php-vulnerabilities-disclosed-and-security-updates-released","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/details-of-critical-php-vulnerabilities-disclosed-and-security-updates-released","title":{"rendered":"Byly odhaleny detaily kritick\u00fdch zranitelnost\u00ed v PHP a zve\u0159ejn\u011bny opravy","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Byly vyd\u00e1ny opravy PHP 8.5.12, 8.4.27, 8.3.36 a 8.2.35, stejn\u011b jako z\u00e1platy pro ji\u017e nepodporovan\u00e9 verze PHP 7.4, PHP 8.0 a PHP 8.1 (zraniteln\u00e9 verze od 5.4 do 7.3 z\u016fst\u00e1vaj\u00ed bez z\u00e1plat), ve kter\u00fdch byly opraveny dv\u011b kritick\u00e9 zranitelnosti:<\/p>\n<ul>\n<li class=\"l\"> CVE-2026-109618 \u2014 vzd\u00e1len\u00e9 proveden\u00ed k\u00f3du, zp\u016fsoben\u00e9 t\u00edm, \u017ee vy\u010derp\u00e1n\u00edm dostupn\u00e9 voln\u00e9 pam\u011bti procesu m\u016f\u017ee zpracovatel nedostatku pam\u011bti prost\u0159ednictv\u00edm proveden\u00ed funkce longjmp() p\u0159eru\u0161it PHP interpreter ve stavu, kdy jsou inicializov\u00e1ny pouze \u010d\u00e1sti intern\u00edch struktur souvisej\u00edc\u00edch se zpracov\u00e1n\u00edm po\u017eadavku. N\u00e1sledn\u011b se funkce ukon\u010den\u00ed zpracov\u00e1n\u00ed po\u017eadavku odkazuje na tyto struktury jako na ji\u017e inicializovan\u00e9, a\u010dkoliv pam\u011b\u0165 pro n\u011b nen\u00ed p\u0159id\u011blena.\n<p>Hlavn\u00edm vektorem \u00fatoku je manipulace s multipart po\u017eadavky za \u00fa\u010delem vytvo\u0159en\u00ed podm\u00ednek pro vy\u010derp\u00e1n\u00ed dostupn\u00e9 pam\u011bti procesu. Pro obch\u00e1zen\u00ed limitu post_max_size nemus\u00ed b\u00fdt uveden\u00fd hlavi\u010dka Content-Length a m\u016f\u017ee b\u00fdt odesl\u00e1no obrovsk\u00e9 mno\u017estv\u00ed HTTP hlavi\u010dek. Je mo\u017en\u00e9 prov\u00e1d\u011bt i c\u00edlen\u00e9 \u00fatoky na konkr\u00e9tn\u00ed operace v php aplikac\u00edch, kter\u00e9 zbyte\u010dn\u011b spot\u0159ebov\u00e1vaj\u00ed pam\u011b\u0165. P\u0159\u00edtomnost exploitu byla potvrzena pro mod_php, proto\u017ee vyvol\u00e1v\u00e1 funkci shutdown() i p\u0159i selh\u00e1n\u00ed. PHP-FPM p\u0159i selh\u00e1n\u00ed ukon\u010d\u00ed podproces, co\u017e zt\u011b\u017euje proveden\u00ed \u00fatoku, ale teoreticky ho nevylu\u010duje. <\/p>\n<li class=\"l\"> CVE-2026-109619 \u2014 vzd\u00e1len\u00e9 proveden\u00ed k\u00f3du, zp\u016fsoben\u00e9 p\u0159\u00edstupem k pam\u011bti po jej\u00edm uvoln\u011bn\u00ed v d\u016fsledku nespr\u00e1vn\u00e9ho vy\u010di\u0161t\u011bn\u00ed glob\u00e1ln\u00edho stavu, v\u00e1zan\u00e9ho na konkr\u00e9tn\u00ed po\u017eadavek. V p\u0159\u00edpad\u011b p\u0159eru\u0161en\u00ed po\u017eadavku z d\u016fvodu fat\u00e1ln\u00ed chyby, \u010dasov\u00e9ho limitu nebo nedostatku pam\u011bti m\u016f\u017ee glob\u00e1ln\u00ed stav z\u016fstat nenastaven a ukazatele z\u016fstanou aktivn\u00ed, navzdory uvoln\u011bn\u00ed pam\u011bti, na kterou se odkazuj\u00ed. P\u0159i zpracov\u00e1n\u00ed n\u00e1sleduj\u00edc\u00edho po\u017eadavku ve stejn\u00e9m procesu m\u016f\u017ee doj\u00edt k p\u0159\u00edstupu pomoc\u00ed zb\u00fdvaj\u00edc\u00edho ukazatele na star\u00fd glob\u00e1ln\u00ed stav.\n<p>Pro provoz m\u016f\u017ee b\u00fdt vyu\u017eito vytv\u00e1\u0159en\u00ed podm\u00ednek k vy\u010derp\u00e1n\u00ed dostupn\u00e9 pam\u011bti p\u0159i zpracov\u00e1n\u00ed multipart \u017e\u00e1dosti v k\u00f3du pro indikaci postupu nahr\u00e1v\u00e1n\u00ed (session.upload_progress). P\u0159itom je jako hlavn\u00ed a potvrzen\u00fd vektor \u00fatoku zm\u00edn\u011bna zpracovatel fatal_error_backtraces v PHP 8.5, kter\u00fd neobnovuje stav trasy p\u0159i ukon\u010den\u00ed. V prvn\u00edm p\u0159\u00edpad\u011b je \u00fatok mo\u017en\u00fd na mod_php a PHP-FPM, v druh\u00e9m pouze na mod_php. Je tak\u00e9 zm\u00edn\u011bna nepotvrzen\u00e1 mo\u017enost proveden\u00ed \u00fatoku v konfigurac\u00edch, v jejich\u017e nastaven\u00edch jsou direktivy, kter\u00e9 vedou k v\u00fdstupu varov\u00e1n\u00ed v ran\u00e9 f\u00e1zi zpracov\u00e1n\u00ed \u017e\u00e1dosti (nap\u0159\u00edklad varov\u00e1n\u00ed o pou\u017e\u00edv\u00e1n\u00ed zastaral\u00fdch parametr\u016f).<\/p>\n<\/ul>\n<p>Je uvedeno, \u017ee \u00fapln\u00e9 zablokov\u00e1n\u00ed zranitelnost\u00ed je mo\u017en\u00e9 pouze prost\u0159ednictv\u00edm instalace aktualizace. N\u00e1sleduj\u00edc\u00ed opat\u0159en\u00ed umo\u017e\u0148uj\u00ed sn\u00ed\u017eit pravd\u011bpodobnost \u00fasp\u011b\u0161n\u00e9ho proveden\u00ed \u00fatok\u016f, ale syst\u00e9m zcela bezpe\u010dn\u00fdm nez\u010din\u00ed:<\/p>\n<ul>\n<li class=\"l\"> Nastaven\u00ed v php.ini parametru \u201ememory_limit=-1\u201c, co\u017e zt\u011b\u017euje mo\u017enost \u00fato\u010dn\u00edka kontrolovat vy\u010derp\u00e1n\u00ed limit\u016f na pam\u011b\u0165.\n<li class=\"l\"> Nastaven\u00ed parametru \u201epost_max_size = 8M\u201c, pokud nen\u00ed t\u0159eba nahr\u00e1vat velk\u00e9 soubory. Hodnota parametru \u201eupload_max_filesize\u201c by m\u011bla b\u00fdt men\u0161\u00ed ne\u017e parametr \u201epost_max_size\u201c.\n<li class=\"l\"> Stanoven\u00ed limitu na povolenou spot\u0159ebu pam\u011bti na syst\u00e9mov\u00e9 \u00farovni prost\u0159ednictv\u00edm cgroup memory.max nebo parametr\u016f spot\u0159eby pam\u011bti kontejnerem, ale ne prost\u0159ednictv\u00edm syst\u00e9mov\u00fdch limit\u016f RLIMIT_AS a RLIMIT_DATA, kter\u00e9 pouze provokuj\u00ed probl\u00e9mov\u00e9 vyvol\u00e1n\u00ed longjmp().\n<li class=\"l\"> Pokud v\u00fdkon nen\u00ed d\u016fle\u017eit\u00fd, je mo\u017en\u00e9 omezit po\u010det \u017e\u00e1dost\u00ed zpracov\u00e1van\u00fdch jedn\u00edm pracovn\u00edkem prost\u0159ednictv\u00edm pm.max_requests=1 v PHP-FPM a MaxRequestsPerChild v Apache httpd.\n<li class=\"l\"> Nastaven\u00ed na \u00farovni php.ini nebo konfigurace <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/cs\/server\/dts-los-angeles\/\"   title=\"serveru\" data-wpil-keyword-link=\"linked\">serveru<\/a> (ne p\u0159es ini_set() nebo FPM .user.ini, proto\u017ee parametr by m\u011bl b\u00fdt platn\u00fd p\u0159ed za\u010d\u00e1tkem zpracov\u00e1n\u00ed po\u017eadavku) parametr \u201esession.upload_progress.enabled=0.\u201c\n<li class=\"l\"> P\u0159i pou\u017eit\u00ed verze PHP 8.5 by m\u011bl b\u00fdt nastaven parametr \u201efatal_error_backtraces=0\u201c.\n<li class=\"l\"> Odstran\u011bn\u00ed zp\u0159\u00edsn\u011bn\u00fdch k jednotliv\u00fdm \u017e\u00e1dostem zastaral\u00fdch nebo chybn\u00fdch nastaven\u00ed (typy assert.* a nespr\u00e1vn\u00e9 cesty v open_basedir), kter\u00e9 vedou k v\u00fdstupu diagnostick\u00fdch zpr\u00e1v p\u0159ed inicializac\u00ed.\n<li class=\"l\"> Odstran\u011bn\u00ed v PHP k\u00f3du situac\u00ed, kter\u00e9 vedou k dosa\u017een\u00ed \u010dasov\u00fdch limit\u016f a fat\u00e1ln\u00edch chyb, na p\u0159\u00edklad souvisej\u00edc\u00edch s poruchami v callback zpracovatel\u00edch a zpracov\u00e1n\u00edm nahr\u00e1v\u00e1n\u00ed.\n<li class=\"l\"> Pro zablokov\u00e1n\u00ed prvn\u00ed zranitelnosti ve star\u0161\u00edch verz\u00edch PHP je mo\u017en\u00e9 nahradit vol\u00e1n\u00ed longjmp() ve zpracovatelsk\u00e9m modulu vy\u010derp\u00e1n\u00ed voln\u00e9 pam\u011bti p\u0159\u00edkazem _exit().\n<li class=\"l\"> D\u00e1le lze sn\u00ed\u017eit hodnotu parametru max_input_nesting_level v php.ini a blokovat multipart po\u017eadavky, jak bylo uk\u00e1z\u00e1no v p\u0159edb\u011b\u017en\u00e9m ozn\u00e1men\u00ed.\n<\/ul>\n<p>Stav odstran\u011bn\u00ed zranitelnost\u00ed ve vyd\u00e1n\u00edch lze vyhodnotit na n\u00e1sleduj\u00edc\u00edch str\u00e1nk\u00e1ch: Debian, Ubuntu, SUSE, RHEL, Gentoo, Arch,<br \/>\nFedora, FreeBSD.<\/p>\n<p>Dodatek 1: Zranitelnosti byly odhaleny pomoc\u00ed AI model\u016f GPT-5.6 a Gemini 4 Argon. Spole\u010dnost OpenAI zve\u0159ejnila utilitu php2shell-checker pro kontrolu zranitelnosti webov\u00fdch str\u00e1nek a lok\u00e1ln\u00edch spustiteln\u00fdch soubor\u016f, ale tato utilita pouze kontroluje \u010d\u00edslo verze PHP vr\u00e1cen\u00e9 HTTP serverem nebo p\u0159\u00edkazem \u201ephp -v\u201c, bez podrobn\u00e9 anal\u00fdzy.<\/p>\n<p>Dodatek 2: Autor prototypu exploituj\u00edc\u00edho zranitelnost zp\u016fsobenou dvojn\u00e1sobn\u00fdm uvoln\u011bn\u00edm pam\u011bti (double-free) uvedl, \u017ee probl\u00e9m z\u016fst\u00e1v\u00e1 neopraven v vyd\u00e1n\u00ed PHP 8.5.12 a exploit nad\u00e1le funguje. D\u0159\u00edve z\u00e1stupci PHP prohl\u00e1sili, \u017ee tato zranitelnost nen\u00ed spojena s p\u0159ipravovan\u00fdmi opravami a nen\u00ed skute\u010dn\u00fdm probl\u00e9mem. Autor exploitu v\u0161ak tvrdil, \u017ee se jedn\u00e1 o zcela jinou zranitelnost.<br \/>\n<br \/>Zdroj: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=66520\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0438 PHP 8.5.12, 8.4.27, 8.3.36 \u0438 8.2.35, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u0430\u0442\u0447\u0438 \u0434\u043b\u044f \u0443\u0436\u0435 \u043d\u0435 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u0432\u0435\u0442\u043e\u043a PHP 7.4, PHP 8.0 \u0438 PHP 8.1 (\u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u0441 5.4 \u043f\u043e 7.3 \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f \u0431\u0435\u0437 \u043f\u0430\u0442\u0447\u0435\u0439), \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0434\u0432\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438: CVE-2026-109618 &#8212; \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430, \u0432\u044b\u0437\u0432\u0430\u043d\u043d\u043e\u0435 \u0442\u0435\u043c, \u0447\u0442\u043e \u043f\u0440\u0438 \u0438\u0441\u0447\u0435\u0440\u043f\u0430\u043d\u0438\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0439 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0443 \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0439 \u043f\u0430\u043c\u044f\u0442\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a \u043d\u0435\u0445\u0432\u0430\u0442\u043a\u0438 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":10,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-183943","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0438 PHP 8.5.12, 8.4.27, 8.3.36 \u0438 8.2.35, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u0430\u0442\u0447\u0438 \u0434\u043b\u044f \u0443\u0436\u0435 \u043d\u0435 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u0432\u0435\u0442\u043e\u043a PHP 7.4, PHP 8.0 \u0438 PHP 8.1 (\u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u0441 5.4 \u043f\u043e 7.3 \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f \u0431\u0435\u0437 \u043f\u0430\u0442\u0447\u0435\u0439), \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0445.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Alexander Kovalev\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/cs\/blog\/news\/details-of-critical-php-vulnerabilities-disclosed-and-security-updates-released\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"cs_CZ\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0420\u0430\u0441\u043a\u0440\u044b\u0442\u044b \u0434\u0435\u0442\u0430\u043b\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 PHP \u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0438 PHP 8.5.12, 8.4.27, 8.3.36 \u0438 8.2.35, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u0430\u0442\u0447\u0438 \u0434\u043b\u044f \u0443\u0436\u0435 \u043d\u0435 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u0432\u0435\u0442\u043e\u043a PHP 7.4, PHP 8.0 \u0438 PHP 8.1 (\u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u0441 5.4 \u043f\u043e 7.3 \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f \u0431\u0435\u0437 \u043f\u0430\u0442\u0447\u0435\u0439), \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0445.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/cs\/blog\/news\/details-of-critical-php-vulnerabilities-disclosed-and-security-updates-released\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2026-10-22T03:40:56+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2026-10-22T03:41:02+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Byly odhaleny detaily kritick\u00fdch zranitelnost\u00ed v PHP a byly zve\u0159ejn\u011bny opravy | ProHoster","description":"Byly zve\u0159ejn\u011bny opravn\u00e9 verze PHP 8.5.12, 8.4.27, 8.3.36 a 8.2.35, stejn\u011b jako z\u00e1platy pro ji\u017e nepodporovan\u00e9 v\u011btve PHP 7.4, PHP 8.0 a PHP 8.1 (zraniteln\u00e9 verze od 5.4 do 7.3 z\u016fst\u00e1vaj\u00ed bez z\u00e1plat).","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/details-of-critical-php-vulnerabilities-disclosed-and-security-updates-released","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0420\u0430\u0441\u043a\u0440\u044b\u0442\u044b \u0434\u0435\u0442\u0430\u043b\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 PHP \u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f | ProHoster","og:description":"\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0438 PHP 8.5.12, 8.4.27, 8.3.36 \u0438 8.2.35, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u0430\u0442\u0447\u0438 \u0434\u043b\u044f \u0443\u0436\u0435 \u043d\u0435 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u0432\u0435\u0442\u043e\u043a PHP 7.4, PHP 8.0 \u0438 PHP 8.1 (\u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u0441 5.4 \u043f\u043e 7.3 \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f \u0431\u0435\u0437 \u043f\u0430\u0442\u0447\u0435\u0439), \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0445.","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/details-of-critical-php-vulnerabilities-disclosed-and-security-updates-released","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-10-22T03:40:56+00:00","article:modified_time":"2026-10-22T03:41:02+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/183943","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=183943"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/183943\/revisions"}],"predecessor-version":[{"id":183944,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/183943\/revisions\/183944"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=183943"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=183943"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=183943"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}