Skip to content

6.2.13

Choose a tag to compare

View all tags
@csandanov csandanov released this 21 Oct 19:30
6.2.13
0b9d906

Changes since 6.2.12

  • ⬆️ Drupal CMS 2.2.6
  • ⬆️ Vanilla Drupal 11.4.11, 10.6.20
  • PHP:
    • ⬆️ PHP 8.5.12, 8.4.27, 8.3.36, 8.2.35 with fixes for two critical remote code execution vulnerabilities (CVE-2026-109618, CVE-2026-109619)
    • ⬆️ MongoDB extension 2.5.5 with BSON decoding security fixes (CVE-2026-106436, CVE-2026-106432, CVE-2026-112368)
    • ⬆️ PIE 1.5.2
  • Nginx:
    • ⬆️ Nginx 1.31.8, 1.30.6
    • 🐞 With NGINX_DRUPAL_FILE_PROXY_URL set, missing CSS and JS aggregates now reach Drupal, which builds them on demand, instead of being redirected to the proxy site. This covers optimized/ aggregates on Drupal 9, 10 and 11 and AdvAgg aggregates on Drupal 7 and 8. Files under sites/*/files/private/ are no longer served directly wodby/nginx#120
  • Vinyl Cache:
    • 🐞 Objects matching VARNISH_SECONDARY_STORAGE_CONDITION are now stored in the secondary storage set by VARNISHD_SECONDARY_STORAGE, and all other objects in the main storage. Previously the condition had no effect and objects alternated between the two storages wodby/vinyl#51 by @thtas
    • 📜 The x-varnish-storage response header is no longer added
  • ⬆️ Adminer 6.1.2
  • ⬆️ Node.js 26.12.0, 24.22.0
  • 🏔️ Alpine Linux updates for MariaDB, Nginx, Vinyl Cache and OpenSMTPD, including a zlib security fix (CVE-2026-85091)

Contributors

thtas
Assets 3
Loading