Skip to content

Docker Laravel v3.0.1

Choose a tag to compare

View all tags
@Allyda Allyda released this 20 Jul 15:33
· 4 commits to main since this release
v3.0.1
ebebe20

Security fixes

  • Upgraded NGINX from 1.31.2 to 1.31.3.
  • Fixed CVE-2026-42533, a heap buffer overflow involving the map directive and regular-expression captures that could lead to denial of service or, under specific conditions, remote code execution.
  • Also includes fixes for CVE-2026-60005 in ngx_http_slice_module and CVE-2026-56434 in ngx_http_ssi_module.

Runtime updates

  • Updated and pinned the base image to Alpine Linux 3.24.
  • Updated PHP packages to 8.5.8.
  • Kept Node.js on the 24 LTS release line (24.17.0) and updated npm to 11.12.1.
  • Prevented packages from different Alpine releases from being mixed.

Validation

  • Base-image, entrypoint, PHP-FPM, NGINX, healthcheck, header, and service tests passed.
  • Derived production build against the Prowect Laravel application passed.
  • Trivy reported no high or critical vulnerabilities.
  • Added regression checks for NGINX, Alpine, Node.js, and package repository versions.

Full details are available in the changelog.

Assets 2
Loading