{"id":183958,"date":"2026-10-22T17:40:23","date_gmt":"2026-10-22T15:40:23","guid":{"rendered":"https:\/\/prohoster.info\/blog\/news\/narusheniya-embargo-i-zatyagivanie-razrabotki-patchej-v-hode-ustraneniya-uyazvimostej-v-php"},"modified":"2026-10-22T17:40:28","modified_gmt":"2026-10-22T15:40:28","slug":"embargo-violations-and-patch-development-delays-in-php-vulnerability-remediation","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hu\/blog\/news\/embargo-violations-and-patch-development-delays-in-php-vulnerability-remediation","title":{"rendered":"A embarg\u00f3s szab\u00e1lyok megszeg\u00e9se \u00e9s a PHP sebezhet\u0151s\u00e9geinek orvosl\u00e1s\u00e1nak elh\u00faz\u00f3d\u00f3 jav\u00edt\u00e1si munk\u00e1i","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

A PHP fejleszt\u0151k nyilv\u00e1noss\u00e1gra hozt\u00e1k a tegnap jav\u00edtott kritikus sebezhet\u0151s\u00e9gekkel kapcsolatos probl\u00e9m\u00e1k jelent\u00e9s\u00e9t. Az el\u00e9rhet\u0151 mem\u00f3ria kimer\u00fcl\u00e9s\u00e9vel kapcsolatos sebezhet\u0151s\u00e9g inform\u00e1ci\u00f3it egy k\u00fcls\u0151 audit sor\u00e1n 2024-ben gy\u0171jt\u00f6tt\u00e9k be, de ezt csak elm\u00e9leti t\u00e1mad\u00e1si lehet\u0151s\u00e9gnek tekintett\u00e9k. A jav\u00edt\u00e1s k\u00e9slekedett, mert a PHP fejleszt\u0151k k\u00f6z\u00f6tt nem tudtak konszenzusra jutni a sebezhet\u0151s\u00e9g kezel\u00e9s\u00e9nek m\u00f3dj\u00e1r\u00f3l. T\u00f6bb verseng\u0151 javaslat is felmer\u00fclt, mindegyik saj\u00e1t h\u00e1tr\u00e1ny\u00e1val. D\u00f6nteni kellett a visszafel\u00e9 kompatibilit\u00e1s megs\u00e9rt\u00e9se, \u00faj t\u00e1mad\u00e1si vektorok megjelen\u00e9se, amelyek szolg\u00e1ltat\u00e1smegtagad\u00e1st okoznak, \u00e9s sz\u00e1mos harmadik f\u00e9l kieg\u00e9sz\u00edt\u0151 m\u00f3dos\u00edt\u00e1s\u00e1nak sz\u00fcks\u00e9gess\u00e9ge k\u00f6z\u00f6tt. <\/p>\n

T\u00f6bb h\u00f3nappal ezel\u0151tt a Calif \u00e9s a Wiz f\u00fcggetlen\u00fcl egym\u00e1st\u00f3l, az AI GPT-5.6 \u00e9s a Gemini 4 Argon modellek seg\u00edts\u00e9g\u00e9vel felt\u00e1rt\u00e1k a probl\u00e9ma kihaszn\u00e1l\u00e1s\u00e1nak m\u0171k\u00f6d\u0151 m\u00f3dszereit, \u00e9s 2026. augusztus 11-\u00e9n \u00e9s 24-\u00e9n jelentett\u00e9k err\u0151l a PHP fejleszt\u0151inek. Ezt k\u00f6vet\u0151en a jav\u00edt\u00e1sok kidolgoz\u00e1sa a legmagasabb priorit\u00e1st kapta, \u00e9s megkezd\u0151d\u00f6tt a d\u00f6nt\u00e9shozatali folyamat \u00e1tform\u00e1l\u00e1sa a komplex kompromisszumokkal kapcsolatos k\u00e9rd\u00e9sek gyorsabb kezel\u00e9s\u00e9nek \u00e9rdek\u00e9ben (az ilyen d\u00f6nt\u00e9sek mostant\u00f3l t\u00f6bbs\u00e9gi szavaz\u00e1ssal hozhat\u00f3k meg, an\u00e9lk\u00fcl, hogy szigor\u00fa konszenzusra lenne sz\u00fcks\u00e9g).<\/p>\n

Eredetileg a jav\u00edt\u00e1sok kiad\u00e1s\u00e1nak koordin\u00e1ci\u00f3ja a disztrib\u00faci\u00f3kkal okt\u00f3ber 22-re volt tervezve, de ezt k\u00f6vet\u0151en \u00e1tpakolt\u00e1k okt\u00f3ber 21-re, miut\u00e1n okt\u00f3ber 20-\u00e1n az interneten kisziv\u00e1rgott inform\u00e1ci\u00f3k \u00e9rkeztek a CVE-azonos\u00edt\u00f3kr\u00f3l \u00e9s a k\u00f6zelg\u0151 jav\u00edt\u00e1si kiad\u00e1sok publik\u00e1l\u00e1si idej\u00e9r\u0151l. <\/p>\n

N\u00e9h\u00e1ny h\u00e9ttel a k\u00f6zelg\u0151 jav\u00edt\u00e1sok bejelent\u00e9se ut\u00e1n a Calif, amely egyik sebezhet\u0151s\u00e9get t\u00e1rta fel, v\u00e9letlen\u00fcl k\u00f6zz\u00e9tett egy vide\u00f3t, amely bemutatja az exploit m\u0171k\u00f6d\u00e9s\u00e9t, \u00edgy l\u00e1that\u00f3v\u00e1 v\u00e1ltak n\u00e9h\u00e1ny r\u00e9szlet, amely sz\u0171k\u00edti a probl\u00e9ma inform\u00e1ci\u00f3s ter\u00fclete \u00e9s reprodukci\u00f3s lehet\u0151s\u00e9geit. A vide\u00f3t gyorsan elt\u00e1vol\u00edtott\u00e1k, ami csak n\u00f6velte a kutat\u00f3k k\u00edv\u00e1ncsis\u00e1g\u00e1t a sebezhet\u0151s\u00e9g mibenl\u00e9t\u00e9r\u0151l \u00e9s felgyors\u00edtotta az alternat\u00edv exploit protot\u00edpusok kidolgoz\u00e1s\u00e1t. <\/p>\n

Emellett, hat \u00f3r\u00e1val a kijel\u00f6lt kiad\u00e1s el\u0151tt a Chainguard megs\u00e9rtette az embarg\u00f3t \u00e9s k\u00f6zz\u00e9tette a disztrib\u00faci\u00f3j\u00e1nak olyan verzi\u00f3it, amelyek tartalmazt\u00e1k a jav\u00edtott PHP-t. Ez a megszeg\u00e9s lehet\u0151s\u00e9get adott a rosszindulat\u00fa szerepl\u0151knek, hogy tanulm\u00e1nyozz\u00e1k a jav\u00edt\u00e1st a hivatalos megjelen\u00e9s el\u0151tt, valamint t\u00f6nkretette az inform\u00e1ci\u00f3k koordin\u00e1lt nyilv\u00e1noss\u00e1gra hozatal\u00e1ra \u00e9s a jav\u00edt\u00e1sok egyidej\u0171 k\u00f6zz\u00e9t\u00e9tel\u00e9re ir\u00e1nyul\u00f3 munk\u00e1t k\u00fcl\u00f6nb\u00f6z\u0151 disztrib\u00faci\u00f3kban.<\/p>\n

Kieg\u00e9sz\u00edt\u00e9s: Tizenhat \u00f3r\u00e1val az univerz\u00e1lis munkak\u00f6rnyezet sebezhet\u0151s\u00e9geir\u0151l sz\u00f3l\u00f3 r\u00e9szletek nyilv\u00e1noss\u00e1gra hozatala ut\u00e1n m\u00e9g nem jelentek meg t\u00f6meges t\u00e1mad\u00e1sok, ami azzal magyar\u00e1zhat\u00f3, hogy a sebezhet\u0151s\u00e9g kihaszn\u00e1l\u00e1sa bonyolult a folyamat mem\u00f3ria strukt\u00far\u00e1j\u00e1nak elrendez\u00e9se miatt, amely minden kiad\u00e1sn\u00e1l specifikus. A nyilv\u00e1noss\u00e1gra hozott m\u0171k\u00f6d\u0151 exploit protot\u00edpusok k\u00fcl\u00f6nb\u00f6z\u0151 konfigur\u00e1ci\u00f3kra \u00e9p\u00edtenek \u00e9s laborat\u00f3riumi k\u00f6r\u00fclm\u00e9nyek k\u00f6z\u00f6tt t\u00f6rt\u00e9n\u0151 t\u00e1mad\u00e1sra ir\u00e1nyulnak. Sz\u00e1mos hamis exploit is megjelent, amelyek mesters\u00e9ges intelligencia hallucin\u00e1ci\u00f3i, csak a t\u00e1mad\u00e1s l\u00e1tszat\u00e1t keltve, \u00e9s a konfigur\u00e1ci\u00f3s hib\u00e1kra vagy m\u00e1s kritikus sebezhet\u0151s\u00e9gekre \u00e9p\u00fclnek.
\n
Forr\u00e1s: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 PHP \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u043e\u0442\u0447\u0451\u0442 \u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u0445, \u0432\u043e\u0437\u043d\u0438\u043a\u0448\u0438\u0445 \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0432\u0447\u0435\u0440\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 PHP. \u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u044e\u0449\u0435\u0439 \u043f\u0440\u0438 \u0438\u0441\u0447\u0435\u0440\u043f\u0430\u043d\u0438\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0439 \u043f\u0430\u043c\u044f\u0442\u0438, \u0431\u044b\u043b\u0430 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0430 \u0432 \u0445\u043e\u0434\u0435 \u0432\u043d\u0435\u0448\u043d\u0435\u0433\u043e \u0430\u0443\u0434\u0438\u0442\u0430 \u0435\u0449\u0451 \u0432 2024 \u0433\u043e\u0434\u0443, \u043d\u043e \u0431\u044b\u043b\u0430 \u0432\u043e\u0441\u043f\u0440\u0438\u043d\u044f\u0442\u0430 \u043b\u0438\u0448\u044c \u043a\u0430\u043a \u0442\u0435\u043e\u0440\u0435\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438. \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0437\u0430\u0442\u044f\u043d\u0443\u043b\u043e\u0441\u044c \u0438\u0437-\u0437\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0441 \u0434\u043e\u0441\u0442\u0438\u0436\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u043d\u0441\u0435\u043d\u0441\u0443\u0441\u0430 \u0441\u0440\u0435\u0434\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 PHP \u043e \u0441\u043f\u043e\u0441\u043e\u0431\u0435 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":10,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-183958","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Az embarg\u00f3 megs\u00e9rt\u00e9se \u00e9s a PHP sebezhet\u0151s\u00e9gek jav\u00edt\u00e1s\u00e1nak elh\u00faz\u00f3d\u00e1sa | ProHoster","description":"A PHP fejleszt\u0151i k\u00f6zz\u00e9tett\u00e9k a jelent\u00e9st a tegnap jav\u00edtott kritikus sebezhet\u0151s\u00e9gekkel kapcsolatos probl\u00e9m\u00e1kr\u00f3l.","canonical_url":"https:\/\/prohoster.info\/hu\/blog\/news\/embargo-violations-and-patch-development-delays-in-php-vulnerability-remediation","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"hu_HU","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044f \u044d\u043c\u0431\u0430\u0440\u0433\u043e \u0438 \u0437\u0430\u0442\u044f\u0433\u0438\u0432\u0430\u043d\u0438\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u0430\u0442\u0447\u0435\u0439 \u0432 \u0445\u043e\u0434\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 PHP | ProHoster","og:description":"\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 PHP \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u043e\u0442\u0447\u0451\u0442 \u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u0445, \u0432\u043e\u0437\u043d\u0438\u043a\u0448\u0438\u0445 \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0432\u0447\u0435\u0440\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 PHP.","og:url":"https:\/\/prohoster.info\/hu\/blog\/news\/embargo-violations-and-patch-development-delays-in-php-vulnerability-remediation","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-10-22T15:40:23+00:00","article:modified_time":"2026-10-22T15:40:28+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/183958","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/comments?post=183958"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/183958\/revisions"}],"predecessor-version":[{"id":183959,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/183958\/revisions\/183959"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/media?parent=183958"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/categories?post=183958"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/tags?post=183958"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}