Linus Gasser
0e2d8484ee
This includes the mitigations proposed by https://www.php.net/archive/2026.php#2026-10-21-5
5 lines
378 B
Plaintext
5 lines
378 B
Plaintext
Security: mitigates PHP RCE CVE-2026-109618 / CVE-2026-109619 (https://www.php.net/archive/2026.php#2026-10-21-5)
|
|
via the FPM pool config: memory_limit=-1, post_max_size=32M, upload_max_filesize=30M,
|
|
session.upload_progress.enabled=0, fatal_error_backtraces=0. PHP_MEMORY_LIMIT and PHP_UPLOAD_LIMIT
|
|
are overridden for web requests until the nextcloud image ships PHP >= 8.5.12.
|