recipe-maintainers/wordpress
0
0
Fork 0
Code Issues Pull Requests 2 Actions Packages Projects Releases Wiki Activity

fix: disable session.upload_progress (CERT-EU 2026-018 / CVE-2026-109619)
cc-ci/testme cc-ci: success
Details

Browse Source 
PHP 8.3.35 in wordpress:7.1.3 is vulnerable to CVE-2026-109618 and
CVE-2026-109619. The real fix is the rebuilt official image on PHP
8.3.36; this disables the confirmed session upload-progress exploit
path as defence in depth and bumps the version so operators redeploy
and re-pull the image.
This commit is contained in:
trav
2026-10-21 09:35:10 -07:00
parent 49c4b520d9
commit 7fc19b6264
4 changed files with 9 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
abra.sh
+1 -1
View File
@@ -1,4 +1,4 @@
export PHP_UPLOADS_CONF_VERSION=v4
export PHP_UPLOADS_CONF_VERSION=v5
export ENTRYPOINT_CONF_VERSION=v10
export ENTRYPOINT_MAILRELAY_CONF_VERSION=v2
export MSMTP_CONF_VERSION=v4