{"id":183958,"date":"2026-10-22T17:40:23","date_gmt":"2026-10-22T15:40:23","guid":{"rendered":"https:\/\/prohoster.info\/blog\/news\/narusheniya-embargo-i-zatyagivanie-razrabotki-patchej-v-hode-ustraneniya-uyazvimostej-v-php"},"modified":"2026-10-22T17:40:28","modified_gmt":"2026-10-22T15:40:28","slug":"embargo-violations-and-patch-development-delays-in-php-vulnerability-remediation","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/embargo-violations-and-patch-development-delays-in-php-vulnerability-remediation","title":{"rendered":"Shkeljet e embargos dhe vonesat n\u00eb zhvillimin e patches gjat\u00eb eliminimit t\u00eb dob\u00ebsive n\u00eb PHP","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Zhvilluesit e PHP publikuan nj\u00eb raport mbi problemet q\u00eb u shfaq\u00ebn gjat\u00eb eliminimit t\u00eb vulnerabiliteteteve kritike t\u00eb korrigjuara dje n\u00eb PHP. Informacioni mbi vulnerabilitetin q\u00eb ndodh p\u00ebr shkak t\u00eb shpenzimit t\u00eb memories s\u00eb disponueshme u mor gjat\u00eb nj\u00eb auditimi t\u00eb jasht\u00ebm n\u00eb vitin 2024, por u prit si nj\u00eb mund\u00ebsi teorike p\u00ebr nj\u00eb sulm. Korrigjimi u vonua p\u00ebr shkak t\u00eb problemeve n\u00eb arritjen e konsensusit midis zhvilluesve t\u00eb PHP p\u00ebr m\u00ebnyr\u00ebn e eliminimit t\u00eb vulnerabilitetit. U shqyrtuan disa propozime konkurruese p\u00ebr zgjidhjen e problemit, secila prej t\u00eb cilave kishte disavantazhet e veta. Kishte nevoj\u00eb t\u00eb zgjidhet midis shkeljes s\u00eb p\u00ebrputhshm\u00ebris\u00eb s\u00eb prapme, shfaqjes s\u00eb vektor\u00ebve t\u00eb rinj p\u00ebr sulme q\u00eb shkaktojn\u00eb nd\u00ebrprerje sh\u00ebrbimi dhe nevoj\u00ebs p\u00ebr t\u00eb b\u00ebr\u00eb ndryshime n\u00eb shum\u00eb zgjerime t\u00eb jashtme. <\/p>\n

Para disa muajve, kompanit\u00eb Calif dhe Wiz, n\u00eb m\u00ebnyr\u00eb t\u00eb pavarur nga nj\u00ebra-tjetra, me ndihm\u00ebn e modeleve t\u00eb AI, GPT-5.6 dhe Gemini 4 Argon, identifikuan metoda efektive p\u00ebr t\u00eb shfryt\u00ebzuar problemin dhe m\u00eb 11 dhe 24 gusht 2026, i njoftuan zhvilluesit e PHP. Pas k\u00ebsaj, zhvillimit t\u00eb rregullimeve iu dha prioriteti m\u00eb i lart\u00eb dhe u fillua reforma e procesit t\u00eb marrjes s\u00eb vendimeve p\u00ebr nj\u00eb reagim m\u00eb proaktiv n\u00eb \u00e7\u00ebshtjet e p\u00ebrfshira me kompromise t\u00eb komplikuara (vendime t\u00eb tilla tani mund t\u00eb merren me shumic\u00eb votash pa pasur nevoj\u00eb p\u00ebr nj\u00eb arritje t\u00eb rrept\u00eb t\u00eb konsensusit).<\/p>\n

Fillimisht, data e publikimit t\u00eb korrigjimeve e koordinuar me distribuimet ishte caktuar p\u00ebr 22 tetor, por m\u00eb pas u rikthye n\u00eb 21 tetor pas nj\u00eb shp\u00ebrthimi m\u00eb 20 tetor n\u00eb rrjetet sociale t\u00eb informacionit mbi identifikuesit CVE dhe t\u00eb dh\u00ebnave t\u00eb pasakta mbi koh\u00ebn e publikimit t\u00eb l\u00ebshimeve t\u00eb ardhshme korrigjuese. <\/p>\n

Menj\u00ebher\u00eb pas njoftimit p\u00ebr korrigjimet e ardhshme, kompania Calif, e cila identifikoi nj\u00eb nga vulnerabilitetet, gabimisht publikoi nj\u00eb video q\u00eb demonstroi funksionimin e eksploitatit, n\u00eb t\u00eb cilin ishin t\u00eb dukshme disa detaje q\u00eb mund t\u00eb ngushtonin fush\u00ebn e k\u00ebrkimit dhe rikrijimit t\u00eb informacionit mbi problemin. Videoja u fshi shpejt, gj\u00eb q\u00eb vet\u00ebm e nxiti d\u00ebshir\u00ebn e studiuesve p\u00ebr t\u00eb zbuluar thelbin e vulnerabilitetit dhe forcoi pun\u00ebn mbi prototipet alternative t\u00eb eksploitateve. <\/p>\n

P\u00ebrve\u00e7 k\u00ebsaj, gjasht\u00eb or\u00eb para publikimit t\u00eb planifikuar t\u00eb rregullimeve, kompania Chainguard shkel embargo-n dhe publikoi nd\u00ebrtimet e shp\u00ebrndarjes s\u00eb saj, duke p\u00ebrfshir\u00eb versionin e p\u00ebrmir\u00ebsuar t\u00eb PHP. Kjo shkelje iu dha mund\u00ebsin\u00eb aktor\u00ebve t\u00eb k\u00ebqij t\u00eb studionin rregullimin para lansimit zyrtar, si dhe \u00e7oi n\u00eb d\u00ebshtimin e t\u00eb gjith\u00eb pun\u00ebs p\u00ebr zbulimin e koordinuar t\u00eb informacionit dhe publikimin e p\u00ebrmir\u00ebsimeve n\u00eb shp\u00ebrndarje t\u00eb ndryshme.<\/p>\n

Shtes\u00eb: Pas 16 or\u00ebsh nga zbulimi i detajeve mbi dob\u00ebsit\u00eb e eksploituesit univers, ende nuk ka pasur sulme masive dhe kjo shpjegohet nga v\u00ebshtir\u00ebsia e shfryt\u00ebzimit t\u00eb dob\u00ebsis\u00eb p\u00ebr shkak t\u00eb nevoj\u00ebs p\u00ebr t\u00eb p\u00ebrcaktuar p\u00ebrb\u00ebrjen strukturale n\u00eb memorie e procesit, e cila \u00ebsht\u00eb specifike p\u00ebr \u00e7do nd\u00ebrtim. Prototipat e publikuar t\u00eb eksploituesve jan\u00eb t\u00eb lidhura me konfigurata t\u00eb ve\u00e7anta dhe k\u00ebrkojn\u00eb q\u00eb sulmi t\u00eb kryhet n\u00eb kushte laboratorike. Po ashtu, ka pasur shum\u00eb eksploitues t\u00eb rrem\u00eb, q\u00eb jan\u00eb halucinacione t\u00eb AI, q\u00eb thjesht krijojn\u00eb nj\u00eb iluzion sulmi, t\u00eb lidhura me gabime n\u00eb konfigurim ose q\u00eb funksionojn\u00eb vet\u00ebm n\u00ebse ekzistojn\u00eb dob\u00ebsi t\u00eb tjera kritike.
\n
Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 PHP \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u043e\u0442\u0447\u0451\u0442 \u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u0445, \u0432\u043e\u0437\u043d\u0438\u043a\u0448\u0438\u0445 \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0432\u0447\u0435\u0440\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 PHP. \u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u044e\u0449\u0435\u0439 \u043f\u0440\u0438 \u0438\u0441\u0447\u0435\u0440\u043f\u0430\u043d\u0438\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0439 \u043f\u0430\u043c\u044f\u0442\u0438, \u0431\u044b\u043b\u0430 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0430 \u0432 \u0445\u043e\u0434\u0435 \u0432\u043d\u0435\u0448\u043d\u0435\u0433\u043e \u0430\u0443\u0434\u0438\u0442\u0430 \u0435\u0449\u0451 \u0432 2024 \u0433\u043e\u0434\u0443, \u043d\u043e \u0431\u044b\u043b\u0430 \u0432\u043e\u0441\u043f\u0440\u0438\u043d\u044f\u0442\u0430 \u043b\u0438\u0448\u044c \u043a\u0430\u043a \u0442\u0435\u043e\u0440\u0435\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438. \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0437\u0430\u0442\u044f\u043d\u0443\u043b\u043e\u0441\u044c \u0438\u0437-\u0437\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0441 \u0434\u043e\u0441\u0442\u0438\u0436\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u043d\u0441\u0435\u043d\u0441\u0443\u0441\u0430 \u0441\u0440\u0435\u0434\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 PHP \u043e \u0441\u043f\u043e\u0441\u043e\u0431\u0435 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":10,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-183958","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Shkeljet e embargo-s dhe vonesa n\u00eb zhvillimin e patch-eve gjat\u00eb eliminimit t\u00eb dob\u00ebsive n\u00eb PHP | ProHoster","description":"Zhvilluesit e PHP publikuan nj\u00eb raport mbi problemet e shfaqura gjat\u00eb procesit t\u00eb p\u00ebrmir\u00ebsimit t\u00eb dob\u00ebsive kritike t\u00eb rregulluara dje n\u00eb PHP.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/news\/embargo-violations-and-patch-development-delays-in-php-vulnerability-remediation","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044f \u044d\u043c\u0431\u0430\u0440\u0433\u043e \u0438 \u0437\u0430\u0442\u044f\u0433\u0438\u0432\u0430\u043d\u0438\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u0430\u0442\u0447\u0435\u0439 \u0432 \u0445\u043e\u0434\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 PHP | ProHoster","og:description":"\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 PHP \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u043e\u0442\u0447\u0451\u0442 \u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u0445, \u0432\u043e\u0437\u043d\u0438\u043a\u0448\u0438\u0445 \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0432\u0447\u0435\u0440\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 PHP.","og:url":"https:\/\/prohoster.info\/sq\/blog\/news\/embargo-violations-and-patch-development-delays-in-php-vulnerability-remediation","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-10-22T15:40:23+00:00","article:modified_time":"2026-10-22T15:40:28+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/183958","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=183958"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/183958\/revisions"}],"predecessor-version":[{"id":183959,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/183958\/revisions\/183959"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=183958"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=183958"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=183958"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}