Compare commits
3
Commits
| Author | SHA1 | Date | |
|---|---|---|---|
|
|
636ddb04bc | ||
|
|
1909869c2a | ||
|
|
4c4f878284 |
@@ -1,6 +1,6 @@
|
|||||||
#!/bin/bash
|
#!/bin/bash
|
||||||
|
|
||||||
export FPM_TUNE_VERSION=v6
|
export FPM_TUNE_VERSION=v5
|
||||||
export NGINX_CONF_VERSION=v9
|
export NGINX_CONF_VERSION=v9
|
||||||
export MY_CNF_VERSION=v6
|
export MY_CNF_VERSION=v6
|
||||||
export ENTRYPOINT_VERSION=v3
|
export ENTRYPOINT_VERSION=v3
|
||||||
|
|||||||
+2
-2
@@ -1,7 +1,7 @@
|
|||||||
version: "3.8"
|
version: "3.8"
|
||||||
services:
|
services:
|
||||||
web:
|
web:
|
||||||
image: nginx:1.31.7
|
image: nginx:1.31.8
|
||||||
depends_on:
|
depends_on:
|
||||||
- app
|
- app
|
||||||
configs:
|
configs:
|
||||||
@@ -95,7 +95,7 @@ services:
|
|||||||
failure_action: rollback
|
failure_action: rollback
|
||||||
order: start-first
|
order: start-first
|
||||||
labels:
|
labels:
|
||||||
- "coop-cloud.${STACK_NAME}.version=15.0.0+34.0.5-fpm"
|
- "coop-cloud.${STACK_NAME}.version=15.0.1+34.0.5-fpm"
|
||||||
- "coop-cloud.${STACK_NAME}.timeout=${TIMEOUT}"
|
- "coop-cloud.${STACK_NAME}.timeout=${TIMEOUT}"
|
||||||
- "backupbot.backup=${ENABLE_BACKUPS:-true}"
|
- "backupbot.backup=${ENABLE_BACKUPS:-true}"
|
||||||
- "backupbot.backup.volumes.redis=false"
|
- "backupbot.backup.volumes.redis=false"
|
||||||
|
|||||||
@@ -1,14 +1,5 @@
|
|||||||
[www]
|
|
||||||
pm = dynamic
|
pm = dynamic
|
||||||
pm.max_children = {{ env "FPM_MAX_CHILDREN" }}
|
pm.max_children = {{ env "FPM_MAX_CHILDREN" }}
|
||||||
pm.start_servers = {{ env "FPM_START_SERVERS" }}
|
pm.start_servers = {{ env "FPM_START_SERVERS" }}
|
||||||
pm.min_spare_servers = {{ env "FPM_MIN_SPARE_SERVERS" }}
|
pm.min_spare_servers = {{ env "FPM_MIN_SPARE_SERVERS" }}
|
||||||
pm.max_spare_servers = {{ env "FPM_MAX_SPARE_SERVERS" }}
|
pm.max_spare_servers = {{ env "FPM_MAX_SPARE_SERVERS" }}
|
||||||
|
|
||||||
; Mitigations for CVE-2026-109618 / CVE-2026-109619 until the image ships
|
|
||||||
; PHP >= 8.5.12, see https://www.php.net/archive/2026.php#2026-10-21-5
|
|
||||||
php_admin_value[memory_limit] = -1
|
|
||||||
php_admin_value[post_max_size] = 32M
|
|
||||||
php_admin_value[upload_max_filesize] = 30M
|
|
||||||
php_admin_value[session.upload_progress.enabled] = 0
|
|
||||||
php_admin_value[fatal_error_backtraces] = 0
|
|
||||||
|
|||||||
@@ -0,0 +1,2 @@
|
|||||||
|
This release is to have a "logical" update to make sure
|
||||||
|
you know the php bug has been fixed.
|
||||||
@@ -1,4 +0,0 @@
|
|||||||
Security: mitigates PHP RCE CVE-2026-109618 / CVE-2026-109619 (https://www.php.net/archive/2026.php#2026-10-21-5)
|
|
||||||
via the FPM pool config: memory_limit=-1, post_max_size=32M, upload_max_filesize=30M,
|
|
||||||
session.upload_progress.enabled=0, fatal_error_backtraces=0. PHP_MEMORY_LIMIT and PHP_UPLOAD_LIMIT
|
|
||||||
are overridden for web requests until the nextcloud image ships PHP >= 8.5.12.
|
|
||||||
Reference in New Issue
Block a user