- Disable PHP session upload progress tracking by @crazy-max in #456
Important
This release disables PHP session upload progress tracking (session.upload_progress.enabled=0) as a precaution against CVE-2026-115560.
This vulnerability can allow remote code execution under an unusual combination of PHP configuration and application behavior. Disabling this feature applies PHP's recommended mitigation until a fix is available. See the PHP advisory for details.
Pull the updated image and recreate your containers to apply the mitigation.
Full Changelog: 1.7.3-r3...1.7.3-r4