- Disable PHP session upload progress tracking by @crazy-max in #600
Important
This release disables PHP session upload progress tracking (session.upload_progress.enabled=0) as a precaution against CVE-2026-115560.
This vulnerability can allow remote code execution under an unusual combination of PHP configuration and application behavior. Disabling this feature applies PHP's recommended mitigation until a fix is available. See the PHP advisory for details.
Pull the updated image and recreate your containers to apply the mitigation.
Full Changelog: 26.10.2-r1...26.10.2-r2