Skip to content

1.7.3-r4

Latest

Choose a tag to compare

@crazy-max crazy-max released this 25 Oct 13:54
Immutable release. Only release title and notes can be modified.
d72bf9d

Important

This release disables PHP session upload progress tracking (session.upload_progress.enabled=0) as a precaution against CVE-2026-115560.

This vulnerability can allow remote code execution under an unusual combination of PHP configuration and application behavior. Disabling this feature applies PHP's recommended mitigation until a fix is available. See the PHP advisory for details.

Pull the updated image and recreate your containers to apply the mitigation.

Full Changelog: 1.7.3-r3...1.7.3-r4