Important
This ONLY fixes PHP security for amd64 CPUs - so Intel/AMD etc.
NOT ARM - e.g. Raspberry PI - there are no arm binaries available yet from upstream provider
ARM fix will be released later - see https://codeberg.org/oerdnj/deb.sury.org/issues/145 for update on arm
Upstream changes
None - only change is disabling PHP setting session.upload_progress.enabled that has been tied to the CVEs and that Pixelfed do not use or rely on
Upgrading
./scripts/update v0.15.2-docker0./scripts/artisan migrate(Unless you haveDB_APPLY_NEW_MIGRATIONS_AUTOMATICALLY=truein your .env file)
PHP 8.3 no longer supported
Set DOCKER_APP_PHP_VERSION to 8.4 or 8.5 if your value is 8.3
./scripts/dottie set DOCKER_APP_PHP_VERSION=8.4(recommended)./scripts/dottie set DOCKER_APP_PHP_VERSION=8.5(recommended)
🔧 Chores
1c25d1d- deps: update nginx docker tag to v1.31.8 (PR #396 by @renovate[bot])65518c4- deps: update dependency hairyhenderson/gomplate to v5.3.1 (PR #397 by @renovate[bot])ef54bf8- deps: update docker/login-action action to v4.7.0 (PR #398 by @renovate[bot])aa1e038- disable session.upload_progress.enabled for secops (commit by @jippi)