recipe-maintainers/wordpress
0
0
Fork 0
Code Issues Pull Requests 1 Actions Packages Projects Releases Wiki Activity

fix: disable session.upload_progress (CERT-EU 2026-018 / CVE-2026-109619) #2

Open
autonomic-bot wants to merge 1 commits from pr-20261021-190326 into main
pull from: pr-20261021-190326
merge into: :main
Conversation 2 Commits 1 Files Changed 4
+9 -3
1 Commits
Author SHA1 Message Date
trav 7fc19b6264 fix: disable session.upload_progress (CERT-EU 2026-018 / CVE-2026-109619)
cc-ci/testme cc-ci: success
Details 
PHP 8.3.35 in wordpress:7.1.3 is vulnerable to CVE-2026-109618 and
CVE-2026-109619. The real fix is the rebuilt official image on PHP
8.3.36; this disables the confirmed session upload-progress exploit
path as defence in depth and bumps the version so operators redeploy
and re-pull the image.
 2026-10-21 09:35:10 -07:00