Skip to content

Set session.upload_progress.enabled=0 - #2614

Merged
J0WI merged 1 commit into
nextcloud:masterfrom
J0WI:mitigate-CVE-2026-115560
Oct 23, 2026
Merged

J0WI merged 1 commit into
nextcloud:masterfrom
J0WI:mitigate-CVE-2026-115560

Conversation

@J0WI

@J0WI J0WI commented Oct 23, 2026

Copy link
Copy Markdown
Contributor

Apply recommend mitigation for the upcoming CVE-2026-115560.

We use session.serialize_handler=igbinary which is not explicitly mentioned in the advisory but igbinary is also just an extension and not part of the PHP core. So better safe than sorry.

https://www.php.net/archive/2026.php#2026-10-23-1

Apply recommend mitigation for the upcoming CVE-2026-115560.

We use session.serialize_handler=igbinary which is not explicitly
mentioned in the advisory but igbinary is also just an extension and not
part of the PHP core. So better safe than sorry.

https://www.php.net/archive/2026.php#2026-10-23-1

Signed-off-by: J0WI <J0WI@users.noreply.github.com>
@J0WI
J0WI merged commit 7e9e152 into nextcloud:master Oct 23, 2026
27 checks passed
@J0WI
J0WI deleted the mitigate-CVE-2026-115560 branch October 23, 2026 12:41
@joshtrichards

Copy link
Copy Markdown
Member

Thanks for staying on top of this, @J0WI. And all your work in general maintaining this image set.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants