{"id":479905,"date":"2026-10-21T18:30:00","date_gmt":"2026-10-21T17:30:00","guid":{"rendered":"https:\/\/hellowp.io\/hu\/kritikus-php-biztonsagi-frissites-2026-oktober\/"},"modified":"2026-10-21T18:30:00","modified_gmt":"2026-10-21T17:30:00","slug":"kritikus-php-biztonsagi-frissites-2026-oktober","status":"publish","type":"post","link":"https:\/\/hellowp.io\/hu\/kritikus-php-biztonsagi-frissites-2026-oktober\/","title":{"rendered":"Kritikus PHP biztons\u00e1gi friss\u00edt\u00e9s: k\u00e9t t\u00e1voli k\u00f3dfuttat\u00e1si hiba jav\u00edtva"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">Okt\u00f3ber 21-\u00e9n a PHP fejleszt\u0151csapata soron k\u00edv\u00fcli biztons\u00e1gi kiad\u00e1st tett k\u00f6zz\u00e9: a <strong>PHP 8.5.12, 8.4.27, 8.3.36 \u00e9s 8.2.35<\/strong> k\u00e9t kritikus hib\u00e1t jav\u00edt. A WordPress.org is k\u00fcl\u00f6n figyelmeztet\u00e9sben k\u00e9rte az oldaltulajdonosokat, hogy miel\u0151bb friss\u00edtsenek.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Mi a probl\u00e9ma?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Mindk\u00e9t hiba (CVE-2026-109618 \u00e9s CVE-2026-109619) <strong>bejelentkez\u00e9s n\u00e9lk\u00fcli t\u00e1voli k\u00f3dfuttat\u00e1st<\/strong> tesz lehet\u0151v\u00e9, vagyis egy t\u00e1mad\u00f3 egyetlen k\u00e9r\u00e9ssel saj\u00e1t k\u00f3dot futtathatna a szerveren. A s\u00falyoss\u00e1guk a CVSS 4.0 sk\u00e1l\u00e1n 9,2, ez a legmagasabb, \u201ekritikus\u201d kateg\u00f3ria.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Az els\u0151 hiba a mem\u00f3riahi\u00e1ny kezel\u00e9s\u00e9ben van: ha a PHP egy k\u00e9r\u00e9s k\u00f6zben kifut a mem\u00f3ri\u00e1b\u00f3l, a f\u00e9lig el\u0151k\u00e9sz\u00edtett bels\u0151 adatokat a k\u00e9r\u00e9s lez\u00e1r\u00e1sakor \u00e9rv\u00e9nyesnek veheti.<\/li>\n<li>A m\u00e1sodik hib\u00e1n\u00e1l egy k\u00e9r\u00e9shez tartoz\u00f3 bels\u0151 \u00e1llapot a mem\u00f3ria felszabad\u00edt\u00e1sa ut\u00e1n is megmaradhat, \u00e9s ugyanazon a folyamaton egy k\u00e9s\u0151bbi k\u00e9r\u00e9s hozz\u00e1f\u00e9rhet.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">A hiba nem a WordPressben van, hanem mag\u00e1ban a PHP-ben, ez\u00e9rt minden webes PHP-alkalmaz\u00e1st \u00e9rint, a futtat\u00e1s m\u00f3dj\u00e1t\u00f3l f\u00fcggetlen\u00fcl (PHP-FPM, Apache mod_php, php-cgi, FrankenPHP, LiteSpeed). A PHP csapata szerint a mod_php-t haszn\u00e1l\u00f3 szervereken a legnagyobb a kock\u00e1zat.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Mit \u00e9rdemes most tenned?<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>N\u00e9zd meg a PHP-verzi\u00f3t:<\/strong> a WordPress-adminban az Eszk\u00f6z\u00f6k \u2192 Webhely eg\u00e9szs\u00e9ge \u2192 Inform\u00e1ci\u00f3 \u2192 Szerver alatt l\u00e1tod.<\/li>\n<li><strong>Ha r\u00e9gebbi a fenti verzi\u00f3kn\u00e1l, friss\u00edts<\/strong>, vagy k\u00e9rd meg a t\u00e1rhelyszolg\u00e1ltat\u00f3dat, hogy tegye meg.<\/li>\n<li><strong>A PHP 8.2-n\u00e9l r\u00e9gebbi verzi\u00f3k m\u00e1r nem kapnak hivatalos biztons\u00e1gi jav\u00edt\u00e1st.<\/strong> Ha az oldalad ilyenen fut, a v\u00e1lt\u00e1s most k\u00fcl\u00f6n\u00f6sen s\u00fcrg\u0151s.<\/li>\n<li>WordPress-friss\u00edt\u00e9sre nincs sz\u00fcks\u00e9g: a jav\u00edt\u00e1s kiz\u00e1r\u00f3lag a PHP-t \u00e9rinti.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">R\u00e9szletek: a <a href=\"https:\/\/wordpress.org\/news\/2026\/10\/critical-php-security-release\/\" target=\"_blank\" rel=\"noopener\">WordPress.org bejelent\u00e9se<\/a> \u00e9s a <a href=\"https:\/\/www.php.net\/archive\/2026.php\" target=\"_blank\" rel=\"noopener\">PHP biztons\u00e1gi k\u00f6zlem\u00e9nye<\/a>.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Friss\u00edt\u00e9s<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">A PHP csapata egy nappal kor\u00e1bban, okt\u00f3ber 20-\u00e1n el\u0151re jelezte a kiad\u00e1st \u00e9s annak pontos id\u0151pontj\u00e1t. Ezt kihaszn\u00e1lva el\u0151re felk\u00e9sz\u00fclt\u00fcnk, \u00edgy a jav\u00edtott verzi\u00f3k megjelen\u00e9se ut\u00e1n <strong>n\u00e9h\u00e1ny percen bel\u00fcl az \u00f6sszes szerver\u00fcnket friss\u00edtett\u00fck<\/strong>.<\/p>\n\n","protected":false},"excerpt":{"rendered":"<p>A PHP okt\u00f3ber 21-\u00e9n k\u00e9t kritikus, bejelentkez\u00e9s n\u00e9lk\u00fcli t\u00e1voli k\u00f3dfuttat\u00e1st lehet\u0151v\u00e9 tev\u0151 hib\u00e1t jav\u00edtott. Mit jelent ez a WordPress-oldaladra, \u00e9s mit \u00e9rdemes tenned?<\/p>\n","protected":false},"author":6144,"featured_media":479906,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[305],"tags":[],"class_list":["post-479905","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-karbantartas"],"_links":{"self":[{"href":"https:\/\/hellowp.io\/hu\/wp-json\/wp\/v2\/posts\/479905","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/hellowp.io\/hu\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/hellowp.io\/hu\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/hellowp.io\/hu\/wp-json\/wp\/v2\/users\/6144"}],"replies":[{"embeddable":true,"href":"https:\/\/hellowp.io\/hu\/wp-json\/wp\/v2\/comments?post=479905"}],"version-history":[{"count":0,"href":"https:\/\/hellowp.io\/hu\/wp-json\/wp\/v2\/posts\/479905\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/hellowp.io\/hu\/wp-json\/wp\/v2\/media\/479906"}],"wp:attachment":[{"href":"https:\/\/hellowp.io\/hu\/wp-json\/wp\/v2\/media?parent=479905"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/hellowp.io\/hu\/wp-json\/wp\/v2\/categories?post=479905"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/hellowp.io\/hu\/wp-json\/wp\/v2\/tags?post=479905"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}