{"id":4330,"date":"2017-09-20T04:20:39","date_gmt":"2017-09-20T04:20:39","guid":{"rendered":"http:\/\/musilda.cz\/?p=4330"},"modified":"2017-09-20T04:20:39","modified_gmt":"2017-09-20T04:20:39","slug":"vas-wordpress-aktualizovan-verzi-4-8-2","status":"publish","type":"post","link":"https:\/\/affinite.io\/cs\/vas-wordpress-aktualizovan-verzi-4-8-2\/","title":{"rendered":"V\u00e1\u0161 WordPress byl aktualizov\u00e1n na verzi 4.8.2"},"content":{"rendered":"<p>Dal\u0161\u00ed vlna automatick\u00fdch aktualizac\u00ed WordPressu je tady. Jde o bezpe\u010dnostn\u00ed aktualizaci a pokud m\u00e1te zak\u00e1zan\u00e9 automatick\u00e9 aktualizov\u00e1n\u00ed j\u00e1dra WordPressu, tak by jste m\u011bli aktualizovat ru\u010dn\u011b.<\/p>\n<p>Dne\u0161n\u00ed aktualizace opravuje n\u00e1sleduj\u00edc\u00ed zranitelnosti:<\/p>\n<ul>\n<li>$wpdb-&gt;prepare() &#8211; m\u016f\u017ee vytvo\u0159it zraniteln\u00e9 query a p\u0159esto\u017ee se nejdn\u00e1 o p\u0159\u00edmou zranitelnost j\u00e1dra, tak byla p\u0159id\u00e1na ochrana, p\u0159edev\u0161\u00edm z d\u016fvodu pou\u017e\u00edv\u00e1n\u00ed plugin\u016f a \u0161ablon.<\/li>\n<li>XSS zranitelnost v oEmbed<\/li>\n<li>XSS zranitelnost ve vizu\u00e1ln\u00edm editoru<\/li>\n<li>path traversal zranitelnost v unzipping souboru<\/li>\n<li>XSS zranitelnost v plugin editoru<\/li>\n<li>path traversal zranitelnost v customiz\u00e9ru<\/li>\n<li>XSS zranitelnost v template names<\/li>\n<li>XSS zranitelnost v link modal<\/li>\n<\/ul>\n<p>Jak vid\u00edte, je toho dost, na to, aby jste podcenili aktualizov\u00e1n\u00ed.<\/p>\n<p>Krom\u011b bezpe\u010dnostn\u00ed \u010d\u00e1sti, obsahuje aktualizace 6 drobn\u00fdch \u00faprav.<\/p>\n<p>V p\u0159\u00edpad\u011b, \u017ee netu\u0161\u00edte co je XSS a chcete se trochu postra\u0161it, p\u0159id\u00e1v\u00e1m odkaz na jednu pr\u00edma prezentaci:<\/p>\n<p>https:\/\/docs.google.com\/presentation\/d\/1v3Me8IWDuvSb1k96UB5RNyXE-hLHk0i6cf5MDJMaxuY\/pub?slide=id.p<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Dal\u0161\u00ed vlna automatick\u00fdch aktualizac\u00ed WordPressu je tady. Jde o bezpe\u010dnostn\u00ed aktualizaci a pokud m\u00e1te zak\u00e1zan\u00e9 automatick\u00e9 aktualizov\u00e1n\u00ed j\u00e1dra WordPressu, tak by jste m\u011bli aktualizovat ru\u010dn\u011b. Dne\u0161n\u00ed aktualizace opravuje n\u00e1sleduj\u00edc\u00ed zranitelnosti: $wpdb-&gt;prepare() &#8211; m\u016f\u017ee vytvo\u0159it zraniteln\u00e9 query a p\u0159esto\u017ee se nejdn\u00e1 o p\u0159\u00edmou zranitelnost j\u00e1dra, tak byla p\u0159id\u00e1na ochrana, p\u0159edev\u0161\u00edm z d\u016fvodu pou\u017e\u00edv\u00e1n\u00ed plugin\u016f a \u0161ablon.<\/p>\n","protected":false},"author":1,"featured_media":1775,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[38,6,30],"tags":[83,472,551],"class_list":["post-4330","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-aktualizace","category-bezpecnost-wordpressu","category-wordpress","tag-bezpecnostni-aktualizace","tag-wordpress-4-8-2","tag-xss"],"_links":{"self":[{"href":"https:\/\/affinite.io\/cs\/wp-json\/wp\/v2\/posts\/4330"}],"collection":[{"href":"https:\/\/affinite.io\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/affinite.io\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/affinite.io\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/affinite.io\/cs\/wp-json\/wp\/v2\/comments?post=4330"}],"version-history":[{"count":0,"href":"https:\/\/affinite.io\/cs\/wp-json\/wp\/v2\/posts\/4330\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/affinite.io\/cs\/wp-json\/wp\/v2\/media\/1775"}],"wp:attachment":[{"href":"https:\/\/affinite.io\/cs\/wp-json\/wp\/v2\/media?parent=4330"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/affinite.io\/cs\/wp-json\/wp\/v2\/categories?post=4330"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/affinite.io\/cs\/wp-json\/wp\/v2\/tags?post=4330"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}