Skip to content

v0.3.1

Latest
Latest

Choose a tag to compare

View all tags
@github-actions github-actions released this 21 Oct 19:37
v0.3.1
e2b4f82
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.
  • Security update: PHP 8.4.27 fixes two critical remote code execution vulnerabilities in PHP itself (CVE-2026-109618, CVE-2026-109619) that can be exploited without logging in. Update now: https://www.php.net/archive/2026.php#2026-10-21-5
  • The image is now based on serversideup/php v5.0.2 (before: v4.5.1, PHP 8.4.23). It also brings nginx 1.30.6 with fixes for five nginx vulnerabilities.
  • TRUSTED_PROXY=off: nginx no longer rewrites the client IP itself, only TRUSTED_PROXIES decides about forwarded headers, as before. No change for setups with a reverse proxy in front: https://openbill.dev/en/reverse-proxy
  • Upgrade: docker compose pull && docker compose up -d
  • No changes to the compose files.

What's Changed

  • PHP 8.4.27 / serversideup v5.0.2 (CVE-2026-109618/109619) – Release 0.3.1 by @baeroe in #31

Full Changelog: v0.3.0...v0.3.1

Contributors

baeroe
Assets 2
Loading