- Disable PHP session upload progress tracking by @crazy-max in #613
Important
This release disables PHP session upload progress tracking (session.upload_progress.enabled=0) as a precaution against CVE-2026-115560.
This vulnerability can allow remote code execution under an unusual combination of PHP configuration and application behavior. Disabling this feature applies PHP's recommended mitigation until a fix is available. See the PHP advisory for details.
Pull the updated image and recreate your containers to apply the mitigation.
Full Changelog: 5.3.18-0.16.25-r1...5.3.18-0.16.25-r2