recipe-maintainers/wordpress
0
0
Fork 0
Code Issues Pull Requests 1 Actions Packages Projects Releases Wiki Activity

fix: disable session.upload_progress (CERT-EU 2026-018 / CVE-2026-109619) #2

Open
autonomic-bot wants to merge 1 commits from pr-20261021-190326 into main
pull from: pr-20261021-190326
merge into: :main
Conversation 2 Commits 1 Files Changed 4
+9 -3
4 changed files with 9 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
abra.sh
+1 -1
View File
@@ -1,4 +1,4 @@
export PHP_UPLOADS_CONF_VERSION=v4
export PHP_UPLOADS_CONF_VERSION=v5
export ENTRYPOINT_CONF_VERSION=v10
export ENTRYPOINT_MAILRELAY_CONF_VERSION=v2
export MSMTP_CONF_VERSION=v4
compose.yml
+1 -1
View File
@@ -63,7 +63,7 @@ services:
- "traefik.http.middlewares.${STACK_NAME}-redirect.redirectregex.replacement=https://${DOMAIN}/$${2}"
- "traefik.http.middlewares.${STACK_NAME}-redirect.redirectregex.permanent=true"
- "coop-cloud.${STACK_NAME}.timeout=${TIMEOUT}"
- "coop-cloud.${STACK_NAME}.version=4.1.1+7.1.3"
- "coop-cloud.${STACK_NAME}.version=4.1.2+7.1.3"
db:
image: "mariadb:13.0"
tests/test_templates.sh
+4
View File
@@ -216,6 +216,10 @@ test_uploads_default() {
echo " FAIL uploads default: expected 30 max_execution_time"
return 1
fi
if ! echo "$output" | grep -q "session.upload_progress.enabled = Off"; then
echo " FAIL uploads default: expected session.upload_progress disabled"
return 1
fi
echo " PASS uploads default"
}
uploads.ini.tmpl
+3 -1
View File
@@ -8,4 +8,6 @@ upload_max_filesize = {{ $upload_max_size }}
post_max_size = {{ $upload_max_size }}
memory_limit = {{ $upload_max_size }}
max_execution_time = {{ $upload_max_time }}
max_input_time = {{ $upload_max_time }}
max_input_time = {{ $upload_max_time }}
session.upload_progress.enabled = Off