- Disable PHP session upload progress tracking by @crazy-max in #204
Important
This release disables PHP session upload progress tracking (session.upload_progress.enabled=0) as a precaution against CVE-2026-115560.
This vulnerability can allow remote code execution under an unusual combination of PHP configuration and application behavior. Disabling this feature applies PHP's recommended mitigation until a fix is available. See the PHP advisory for details.
Pull the updated image and recreate your containers to apply the mitigation.
Full Changelog: 1.8.20-r2...1.8.20-r3