Commit Graph
3 Commits
Author SHA1 Message Date
trav 7fc19b6264 fix: disable session.upload_progress (CERT-EU 2026-018 / CVE-2026-109619)
cc-ci/testme cc-ci: success
PHP 8.3.35 in wordpress:7.1.3 is vulnerable to CVE-2026-109618 and
CVE-2026-109619. The real fix is the rebuilt official image on PHP
8.3.36; this disables the confirmed session upload-progress exploit
path as defence in depth and bumps the version so operators redeploy
and re-pull the image.
2026-10-21 09:35:10 -07:00
trav 49c4b520d9 chore: publish 4.1.1+7.1.3 release 2026-10-19 09:53:19 -07:00
trav 97b9b99e93 chore: publish 2.16.2+6.8.3 release 2025-10-15 11:30:23 -04:00