{"id":183958,"date":"2026-10-22T17:40:23","date_gmt":"2026-10-22T15:40:23","guid":{"rendered":"https:\/\/prohoster.info\/blog\/news\/narusheniya-embargo-i-zatyagivanie-razrabotki-patchej-v-hode-ustraneniya-uyazvimostej-v-php"},"modified":"2026-10-22T17:40:28","modified_gmt":"2026-10-22T15:40:28","slug":"embargo-violations-and-patch-development-delays-in-php-vulnerability-remediation","status":"publish","type":"post","link":"https:\/\/prohoster.info\/lv\/blog\/news\/embargo-violations-and-patch-development-delays-in-php-vulnerability-remediation","title":{"rendered":"Embar\u0123a p\u0101rk\u0101pumi un l\u0113na iel\u0101pu izstr\u0101de, nov\u0113r\u0161ot PHP ievainojam\u012bbas","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

PHP izstr\u0101d\u0101t\u0101ji public\u0113ju\u0161i zi\u0146ojumu par probl\u0113m\u0101m, kas radu\u0161\u0101s, nov\u0113r\u0161ot vakar nov\u0113rst\u0101s kritisk\u0101s ievainojam\u012bbas PHP. Inform\u0101cija par ievainojam\u012bbu, kas rodas, izsmejot pieejamo atmi\u0146u, tika ieg\u016bta \u0101r\u0113j\u0101 audit\u0101 v\u0113l 2024. gad\u0101, ta\u010du tika uztverta tikai k\u0101 teor\u0113tiska uzbrukuma iesp\u0113ja. Nov\u0113r\u0161anai bija nepiecie\u0161ams ilgs laiks sakar\u0101 ar probl\u0113m\u0101m, kas rad\u0101s PHP izstr\u0101d\u0101t\u0101ju vid\u016b par veidu, k\u0101 nov\u0113rst ievainojam\u012bbu. Tika apspriesti vair\u0101ki konkur\u0113jo\u0161i risin\u0101jumi, no kuriem katram bija savi tr\u016bkumi. Bija nepiecie\u0161ams izv\u0113l\u0113ties starp atpaka\u013csavietojam\u012bbas p\u0101rk\u0101p\u0161anu, jaunu uzbrukuma vektoru ra\u0161anos, kas izraisa pakalpojumu atteikumu, un nepiecie\u0161am\u012bbu veikt izmai\u0146as daudzos tre\u0161o pu\u0161u papildin\u0101jumos. <\/p>\n

Pirms vair\u0101kiem m\u0113ne\u0161iem uz\u0146\u0113mumi Calif un Wiz neatkar\u012bgi viens no otra, izmantojot AI mode\u013cus GPT\u20115.6 un Gemini 4 Argon, identific\u0113ja darb\u012bbas metodes, k\u0101 risin\u0101t probl\u0113mu, un 2026. gada 11. un 24. august\u0101 zi\u0146oja par to PHP izstr\u0101d\u0101t\u0101jiem. P\u0113c tam boj\u0101jumu labojumu izstr\u0101dei tika pie\u0161\u0137irta visaugst\u0101k\u0101 priorit\u0101te, un tika uzs\u0101kts l\u0113mumu pie\u0146em\u0161anas procesa reform\u0113\u0161ana, lai nodro\u0161in\u0101tu \u0101tr\u0101ku rea\u0123\u0113\u0161anu uz jaut\u0101jumiem, kas saist\u012bti ar sare\u017e\u0123\u012btiem kompromisiem (l\u012bdz\u012bgi l\u0113mumi tagad var tikt pie\u0146emti ar balsu vair\u0101kumu bez stingras konsensa sasnieg\u0161anas).<\/p>\n

S\u0101kotn\u0113ji, saska\u0146ojot ar izplat\u012b\u0161anas datiem, labojumu public\u0113\u0161anas datums bija noteikts uz 22. oktobri, ta\u010du p\u0113c tam tas tika p\u0101rcelts uz 21. oktobri p\u0113c tam, kad 20. oktobr\u012b soci\u0101lajos t\u012bklos izplat\u012bj\u0101s inform\u0101cija par CVE identifikatoriem un nepareizajiem datiem par gaid\u0101mo labojumu public\u0113\u0161anas laiku. <\/p>\n

Dr\u012bz p\u0113c gaid\u0101mo labojumu pazi\u0146ojuma uz\u0146\u0113mum\u0101 Calif, kas atkl\u0101ja vienu no ievainojam\u012bb\u0101m, k\u013c\u016bdaini public\u0113ja video, kur\u0101 tika demonstr\u0113ta eksploit\u0101cijas darb\u012bba, kur\u0101 bija paman\u0101mas da\u017eas deta\u013cas, kas \u013c\u0101va samazin\u0101t inform\u0101cijas mekl\u0113\u0161anas un atk\u0101rto\u0161anas jomu. Video tika \u0101tri izdz\u0113sts, kas tikai motiv\u0113ja p\u0113tniekus dzi\u013c\u0101k izp\u0113t\u012bt ievainojam\u012bbu un pa\u0101trin\u0101ja alternat\u012bvo eksploit\u0101cijas prototipu izstr\u0101di. <\/p>\n

Papildus tam, se\u0161as stundas pirms pl\u0101not\u0101 labojumu public\u0113\u0161anas, uz\u0146\u0113mums Chainguard p\u0101rk\u0101pa embargo un public\u0113ja savu izplat\u012bjumu versijas, kas satur\u0113ja laboto PHP versiju. \u0160\u0101ds p\u0101rk\u0101pums \u013c\u0101va \u013caunpr\u0101t\u012bgiem lietot\u0101jiem iepaz\u012bties ar labojumu pirms ofici\u0101l\u0101 izlai\u0161anas, k\u0101 ar\u012b izn\u012bcin\u0101ja visu darbu par saska\u0146otu inform\u0101cijas atkl\u0101\u0161anu un vienlaic\u012bgu labojumu public\u0113\u0161anu da\u017e\u0101dos izplat\u012bjumos.<\/p>\n

Pielikums: Pusotru stundu p\u0113c inform\u0101cijas atkl\u0101\u0161anas par univers\u0101l\u0101 darba eksploit\u0101cijas ievainojam\u012bbas deta\u013c\u0101m v\u0113l nav nov\u0113rotas masveida uzbrukumi, ko izskaidro ievainojam\u012bbas sare\u017e\u0123\u012bt\u012bba t\u0101s izmanto\u0161an\u0101, jo ir nepiecie\u0161ams noteikt strukt\u016bru izk\u0101rtojumu procesa atmi\u0146\u0101, kas ir specifisks katrai versijai. Publiskotie darbsp\u0113j\u012bgie eksploit\u0101cijas prototipi ir saist\u012bti ar konkr\u0113t\u0101m konfigur\u0101cij\u0101m un uzbrukuma veik\u0161anu laboratorijas apst\u0101k\u013cos. T\u0101pat par\u0101d\u012bju\u0161ies daudzi viltus eksploit\u0101cijas, kas ir AI halucin\u0101cijas, kas tikai rada uzbrukuma izskatu, balstoties uz konfigur\u0101cijas k\u013c\u016bd\u0101m vai str\u0101d\u0101jot tikai kl\u0101tb\u016btn\u0113 citu kritisku ievainojam\u012bbu.
\n
Avots: opennet.lv<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 PHP \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u043e\u0442\u0447\u0451\u0442 \u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u0445, \u0432\u043e\u0437\u043d\u0438\u043a\u0448\u0438\u0445 \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0432\u0447\u0435\u0440\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 PHP. \u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u044e\u0449\u0435\u0439 \u043f\u0440\u0438 \u0438\u0441\u0447\u0435\u0440\u043f\u0430\u043d\u0438\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0439 \u043f\u0430\u043c\u044f\u0442\u0438, \u0431\u044b\u043b\u0430 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0430 \u0432 \u0445\u043e\u0434\u0435 \u0432\u043d\u0435\u0448\u043d\u0435\u0433\u043e \u0430\u0443\u0434\u0438\u0442\u0430 \u0435\u0449\u0451 \u0432 2024 \u0433\u043e\u0434\u0443, \u043d\u043e \u0431\u044b\u043b\u0430 \u0432\u043e\u0441\u043f\u0440\u0438\u043d\u044f\u0442\u0430 \u043b\u0438\u0448\u044c \u043a\u0430\u043a \u0442\u0435\u043e\u0440\u0435\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438. \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0437\u0430\u0442\u044f\u043d\u0443\u043b\u043e\u0441\u044c \u0438\u0437-\u0437\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0441 \u0434\u043e\u0441\u0442\u0438\u0436\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u043d\u0441\u0435\u043d\u0441\u0443\u0441\u0430 \u0441\u0440\u0435\u0434\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 PHP \u043e \u0441\u043f\u043e\u0441\u043e\u0431\u0435 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":10,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-183958","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Embarogo p\u0101rk\u0101pumi un p\u0113cpadomju aizkav\u0113\u0161an\u0101s pl\u0101nveida ar PHP ievainojam\u012bbu nov\u0113r\u0161anai | ProHoster","description":"PHP izstr\u0101d\u0101t\u0101ji ir public\u0113ju\u0161i zi\u0146ojumu par probl\u0113m\u0101m, kas radu\u0161\u0101s labojumu proces\u0101, lai nov\u0113rstu iepriek\u0161 vakar atkl\u0101t\u0101s kritisk\u0101s ievainojam\u012bbas PHP.","canonical_url":"https:\/\/prohoster.info\/lv\/blog\/news\/embargo-violations-and-patch-development-delays-in-php-vulnerability-remediation","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"lv_LV","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044f \u044d\u043c\u0431\u0430\u0440\u0433\u043e \u0438 \u0437\u0430\u0442\u044f\u0433\u0438\u0432\u0430\u043d\u0438\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u0430\u0442\u0447\u0435\u0439 \u0432 \u0445\u043e\u0434\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 PHP | ProHoster","og:description":"\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 PHP \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u043e\u0442\u0447\u0451\u0442 \u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u0445, \u0432\u043e\u0437\u043d\u0438\u043a\u0448\u0438\u0445 \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0432\u0447\u0435\u0440\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 PHP.","og:url":"https:\/\/prohoster.info\/lv\/blog\/news\/embargo-violations-and-patch-development-delays-in-php-vulnerability-remediation","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-10-22T15:40:23+00:00","article:modified_time":"2026-10-22T15:40:28+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts\/183958","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/comments?post=183958"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts\/183958\/revisions"}],"predecessor-version":[{"id":183959,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts\/183958\/revisions\/183959"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/media?parent=183958"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/categories?post=183958"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/tags?post=183958"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}