chore: publish 15.0.1+34.0.5-fpm release

Release minor version for PHP update
The nextcloud image release kept the same minor version, so it's not directly visible if your server runs the updated image or not. Releasing a new version here does a 'undeploy' and 'deploy', which pulls the latest image.
2026-10-22 20:49:04 +02:00 · 2026-10-22 09:07:33 +02:00 · 2026-10-21 23:21:31 +00:00
5 changed files with 5 additions and 16 deletions
@@ -1,6 +1,6 @@
 #!/bin/bash

-export FPM_TUNE_VERSION=v6
+export FPM_TUNE_VERSION=v5
 export NGINX_CONF_VERSION=v9
 export MY_CNF_VERSION=v6
 export ENTRYPOINT_VERSION=v3
@@ -1,7 +1,7 @@
 version: "3.8"
 services:
  web:
-    image: nginx:1.31.7
+    image: nginx:1.31.8
    depends_on:
      - app
    configs:
@@ -95,7 +95,7 @@ services:
        failure_action: rollback
        order: start-first
      labels:
-        - "coop-cloud.${STACK_NAME}.version=15.0.0+34.0.5-fpm"
+        - "coop-cloud.${STACK_NAME}.version=15.0.1+34.0.5-fpm"
        - "coop-cloud.${STACK_NAME}.timeout=${TIMEOUT}"
        - "backupbot.backup=${ENABLE_BACKUPS:-true}"
        - "backupbot.backup.volumes.redis=false"
@@ -1,14 +1,5 @@
-[www]
 pm = dynamic
 pm.max_children = {{ env "FPM_MAX_CHILDREN" }}
 pm.start_servers = {{ env "FPM_START_SERVERS" }}
 pm.min_spare_servers = {{ env "FPM_MIN_SPARE_SERVERS" }}
 pm.max_spare_servers = {{ env "FPM_MAX_SPARE_SERVERS" }}
-
-; Mitigations for CVE-2026-109618 / CVE-2026-109619 until the image ships
-; PHP >= 8.5.12, see https://www.php.net/archive/2026.php#2026-10-21-5
-php_admin_value[memory_limit] = -1
-php_admin_value[post_max_size] = 32M
-php_admin_value[upload_max_filesize] = 30M
-php_admin_value[session.upload_progress.enabled] = 0
-php_admin_value[fatal_error_backtraces] = 0
@@ -0,0 +1,2 @@
+This release is to have a "logical" update to make sure
+you know the php bug has been fixed.
@@ -1,4 +0,0 @@
-Security: mitigates PHP RCE CVE-2026-109618 / CVE-2026-109619 (https://www.php.net/archive/2026.php#2026-10-21-5)
-via the FPM pool config: memory_limit=-1, post_max_size=32M, upload_max_filesize=30M,
-session.upload_progress.enabled=0, fatal_error_backtraces=0. PHP_MEMORY_LIMIT and PHP_UPLOAD_LIMIT
-are overridden for web requests until the nextcloud image ships PHP >= 8.5.12.
Author	SHA1	Message	Date
dannygroenewegen	636ddb04bc	chore: publish 15.0.1+34.0.5-fpm release continuous-integration/drone/tag Build is passing Details	2026-10-22 20:49:04 +02:00
Linus Gasser	1909869c2a	Release minor version for PHP update The nextcloud image release kept the same minor version, so it's not directly visible if your server runs the updated image or not. Releasing a new version here does a 'undeploy' and 'deploy', which pulls the latest image.	2026-10-22 09:07:33 +02:00
renovate-bot	4c4f878284	chore(deps): update nginx docker tag to v1.31.8	2026-10-21 23:21:31 +00:00