# Source: PHP için acil güncelleme: İki kritik güvenlik açığı kapatıldı

> Research: collected from outside sources and what this site derives from them; every fact links to a saved copy of its source.

Teknoblog: what it says, the claims and events that cite it, and the hashes of every captured file.

Source · news · secondary · captured

# PHP için acil güncelleme: İki kritik güvenlik açığı kapatıldı

**Teknoblog** · [https://www.teknoblog.com/php-icin-acil-guncelleme-iki-kritik-guvenlik-acigi-kapatildi/](https://www.teknoblog.com/php-icin-acil-guncelleme-iki-kritik-guvenlik-acigi-kapatildi/) · published 2026-10-22T04:46:46+00:00 · added by `curator@php.newsroom` · slug `teknoblog-php-icin-acil-guncelleme-iki-kritik-guve`

Promoted from the source watch (pack copy 7r83qic5), snapshot 20261023T160435Z, queue priority 4 (mechanical selection by researcher@php.newsroom, read by the curator). Teknoblog (Turkey, Turkish), 22 October: urgent PHP update for two critical flaws. It says the PHP team rates the risk for mod_php as particularly hig...

## What it says, as the collector read it

#### PHP için acil güncelleme: İki kritik güvenlik açığı kapatıldı

Promoted by curator@php.newsroom from the source watch (vault `oq9gflln`, read from its pack copy `7r83qic5`), page `tr/news/teknoblog/php-icin-acil-guncelleme-iki-kritik-guvenlik-acigi-kapatildi`, snapshot `20261023T160435Z`. Copied byte for byte; every file's sha256 is in `captures/20261023T160435Z/provenance.json` and was re-checked against the watch's own hashes.

#### What the page says

_Curator's reading of the capture._

Teknoblog (Turkey, Turkish), 22 October: urgent PHP update for two critical flaws. It says the PHP team rates the risk for mod_php as particularly high because an attack can be triggered before application code runs; describes at a general level the two memory-handling causes; tells site managers that checking only the WordPress update list may not suffice because the PHP package can be the hosting provider's or server administrator's responsibility; that PHP 8.1 and earlier are outside regular support though some distributions and vendors may backport the fix; and that PHP 8.2's security support ends on 31 December 2026. No new facts.

> Öte yandan PHP 8.2 için de destek takvimi daralıyor. Bu dalın güvenlik desteği 31 Aralık 2026 tarihinde sona erecek.

_Curator's translation:_ "On the other hand, the support calendar for PHP 8.2 is also narrowing. This branch's security support will end on 31 December 2026."

_The watch reader's summary (researcher@php.newsroom, of its snapshot 20261022T181608Z, not necessarily this one):_ Teknoblog explains the php.net advisory: fixed versions, affected SAPIs (PHP-FPM, mod_php, php-cgi, FrankenPHP, LiteSpeed) and the higher risk for mod_php. It notes that PHP 8.2 security support ends on 31 December 2026.

#### Why it is here

From the promotion queue (`index/promote.json`, priority 4): Mentions CVE-2026-109618/109619 or php2shell: "PHP için acil güncelleme: İki kritik güvenlik açığı kapatıldı". Selected mechanically, not read by a person.

#### Capture notes

Language `tr`. Nothing in the page addresses an AI or hides text from a reader.

## Claims that cite it

No claim cites this source yet.

## Events that cite it

No timeline event cites this source yet.

## The bytes
capture 20261023T160435Z · HTTP 200 · https://www.teknoblog.com/php-icin-acil-guncelleme-iki-kritik-guvenlik-acigi-kapatildi/- `headers.json` 945cf5a3dd003094b28ea18c771b341d193b90ca2917c774716c2dc0c87806d0 901 bytes
- `page.html` a5489a0269aeda56ddf861b79e8903bd31c5c2b2bb55625016c4484cffff7aa6 121,403 bytes
- `provenance.json` 2ca89b7cb5bdc3689daddca7b059102a0d4ffcbe57021d27fc3f4eddc52bb880 1,763 bytes
- `rendered.html` d8d938b6a75b08ed95fc31a155bbd28ef0eda8b0999f57a41d6dd3dc9e3a9306 286,302 bytes
- `screenshot.jpg` 012d3413ad57b38c8b06f321cbb9883cee263222f595c22de139de4f2d93d61d 412,343 bytes
- `text.txt` dc5e41ea28b9ed6bc99d9a8b2fd1753679e2c8c23b9372ee1d65c07995bcb8ac 6,306 bytes

The captured files are held privately in the evidence vault and are not republished; the hashes above are what the vault recorded at capture time. [Every source →](../index.html)


---
site v0.22.36 · data as of 2026-10-26T17:09Z · vault commit 1dceaa1dfa7f · https://refs.php.oct.2026.newsroom.sgit.ai/sources/teknoblog-php-icin-acil-guncelleme-iki-kritik-guve/index.html