From a8969253dfcce1db6c0145a8f3ec1f955ea4a7a6 Mon Sep 17 00:00:00 2001 From: J0WI Date: Fri, 23 Oct 2026 14:20:59 +0200 Subject: [PATCH] Set session.upload_progress.enabled=0 Apply recommend mitigation for the upcoming CVE-2026-115560. We use session.serialize_handler=igbinary which is not explicitly mentioned in the advisory but igbinary is also just an extension and not part of the PHP core. So better safe than sorry. https://www.php.net/archive/2026.php#2026-10-23-1 Signed-off-by: J0WI --- 32/apache/Dockerfile | 1 + 32/fpm-alpine/Dockerfile | 1 + 32/fpm/Dockerfile | 1 + 33/apache/Dockerfile | 1 + 33/fpm-alpine/Dockerfile | 1 + 33/fpm/Dockerfile | 1 + 34/apache/Dockerfile | 1 + 34/fpm-alpine/Dockerfile | 1 + 34/fpm/Dockerfile | 1 + 35/apache/Dockerfile | 1 + 35/fpm-alpine/Dockerfile | 1 + 35/fpm/Dockerfile | 1 + Dockerfile-alpine.template | 1 + Dockerfile-debian.template | 1 + 14 files changed, 14 insertions(+) diff --git a/32/apache/Dockerfile b/32/apache/Dockerfile index 0896205bc..e8fdf81bb 100644 --- a/32/apache/Dockerfile +++ b/32/apache/Dockerfile @@ -115,6 +115,7 @@ RUN { \ { \ echo 'apc.serializer=igbinary'; \ echo 'session.serialize_handler=igbinary'; \ + echo 'session.upload_progress.enabled=0'; \ } >> "${PHP_INI_DIR}/conf.d/docker-php-ext-igbinary.ini"; \ \ { \ diff --git a/32/fpm-alpine/Dockerfile b/32/fpm-alpine/Dockerfile index 2c9480512..4d578f728 100644 --- a/32/fpm-alpine/Dockerfile +++ b/32/fpm-alpine/Dockerfile @@ -106,6 +106,7 @@ RUN { \ { \ echo 'apc.serializer=igbinary'; \ echo 'session.serialize_handler=igbinary'; \ + echo 'session.upload_progress.enabled=0'; \ } >> "${PHP_INI_DIR}/conf.d/docker-php-ext-igbinary.ini"; \ \ { \ diff --git a/32/fpm/Dockerfile b/32/fpm/Dockerfile index bb5902d87..650fe67bd 100644 --- a/32/fpm/Dockerfile +++ b/32/fpm/Dockerfile @@ -115,6 +115,7 @@ RUN { \ { \ echo 'apc.serializer=igbinary'; \ echo 'session.serialize_handler=igbinary'; \ + echo 'session.upload_progress.enabled=0'; \ } >> "${PHP_INI_DIR}/conf.d/docker-php-ext-igbinary.ini"; \ \ { \ diff --git a/33/apache/Dockerfile b/33/apache/Dockerfile index 60bd4ef82..fb6e7e9e1 100644 --- a/33/apache/Dockerfile +++ b/33/apache/Dockerfile @@ -115,6 +115,7 @@ RUN { \ { \ echo 'apc.serializer=igbinary'; \ echo 'session.serialize_handler=igbinary'; \ + echo 'session.upload_progress.enabled=0'; \ } >> "${PHP_INI_DIR}/conf.d/docker-php-ext-igbinary.ini"; \ \ { \ diff --git a/33/fpm-alpine/Dockerfile b/33/fpm-alpine/Dockerfile index bd40aac92..ff3fcc19d 100644 --- a/33/fpm-alpine/Dockerfile +++ b/33/fpm-alpine/Dockerfile @@ -106,6 +106,7 @@ RUN { \ { \ echo 'apc.serializer=igbinary'; \ echo 'session.serialize_handler=igbinary'; \ + echo 'session.upload_progress.enabled=0'; \ } >> "${PHP_INI_DIR}/conf.d/docker-php-ext-igbinary.ini"; \ \ { \ diff --git a/33/fpm/Dockerfile b/33/fpm/Dockerfile index 007f09ebc..543867987 100644 --- a/33/fpm/Dockerfile +++ b/33/fpm/Dockerfile @@ -115,6 +115,7 @@ RUN { \ { \ echo 'apc.serializer=igbinary'; \ echo 'session.serialize_handler=igbinary'; \ + echo 'session.upload_progress.enabled=0'; \ } >> "${PHP_INI_DIR}/conf.d/docker-php-ext-igbinary.ini"; \ \ { \ diff --git a/34/apache/Dockerfile b/34/apache/Dockerfile index c3aac906f..7a6a69f37 100644 --- a/34/apache/Dockerfile +++ b/34/apache/Dockerfile @@ -115,6 +115,7 @@ RUN { \ { \ echo 'apc.serializer=igbinary'; \ echo 'session.serialize_handler=igbinary'; \ + echo 'session.upload_progress.enabled=0'; \ } >> "${PHP_INI_DIR}/conf.d/docker-php-ext-igbinary.ini"; \ \ { \ diff --git a/34/fpm-alpine/Dockerfile b/34/fpm-alpine/Dockerfile index 185a751d3..05efcc68c 100644 --- a/34/fpm-alpine/Dockerfile +++ b/34/fpm-alpine/Dockerfile @@ -106,6 +106,7 @@ RUN { \ { \ echo 'apc.serializer=igbinary'; \ echo 'session.serialize_handler=igbinary'; \ + echo 'session.upload_progress.enabled=0'; \ } >> "${PHP_INI_DIR}/conf.d/docker-php-ext-igbinary.ini"; \ \ { \ diff --git a/34/fpm/Dockerfile b/34/fpm/Dockerfile index 16edc082f..5f346aa5a 100644 --- a/34/fpm/Dockerfile +++ b/34/fpm/Dockerfile @@ -115,6 +115,7 @@ RUN { \ { \ echo 'apc.serializer=igbinary'; \ echo 'session.serialize_handler=igbinary'; \ + echo 'session.upload_progress.enabled=0'; \ } >> "${PHP_INI_DIR}/conf.d/docker-php-ext-igbinary.ini"; \ \ { \ diff --git a/35/apache/Dockerfile b/35/apache/Dockerfile index a37c32928..27604368a 100644 --- a/35/apache/Dockerfile +++ b/35/apache/Dockerfile @@ -115,6 +115,7 @@ RUN { \ { \ echo 'apc.serializer=igbinary'; \ echo 'session.serialize_handler=igbinary'; \ + echo 'session.upload_progress.enabled=0'; \ } >> "${PHP_INI_DIR}/conf.d/docker-php-ext-igbinary.ini"; \ \ { \ diff --git a/35/fpm-alpine/Dockerfile b/35/fpm-alpine/Dockerfile index f82755f13..e8c47febb 100644 --- a/35/fpm-alpine/Dockerfile +++ b/35/fpm-alpine/Dockerfile @@ -106,6 +106,7 @@ RUN { \ { \ echo 'apc.serializer=igbinary'; \ echo 'session.serialize_handler=igbinary'; \ + echo 'session.upload_progress.enabled=0'; \ } >> "${PHP_INI_DIR}/conf.d/docker-php-ext-igbinary.ini"; \ \ { \ diff --git a/35/fpm/Dockerfile b/35/fpm/Dockerfile index 631c82723..b0c24f239 100644 --- a/35/fpm/Dockerfile +++ b/35/fpm/Dockerfile @@ -115,6 +115,7 @@ RUN { \ { \ echo 'apc.serializer=igbinary'; \ echo 'session.serialize_handler=igbinary'; \ + echo 'session.upload_progress.enabled=0'; \ } >> "${PHP_INI_DIR}/conf.d/docker-php-ext-igbinary.ini"; \ \ { \ diff --git a/Dockerfile-alpine.template b/Dockerfile-alpine.template index 30eef79df..5528e2116 100644 --- a/Dockerfile-alpine.template +++ b/Dockerfile-alpine.template @@ -105,6 +105,7 @@ RUN { \ { \ echo 'apc.serializer=igbinary'; \ echo 'session.serialize_handler=igbinary'; \ + echo 'session.upload_progress.enabled=0'; \ } >> "${PHP_INI_DIR}/conf.d/docker-php-ext-igbinary.ini"; \ \ { \ diff --git a/Dockerfile-debian.template b/Dockerfile-debian.template index 72e4d08ce..75da3497f 100644 --- a/Dockerfile-debian.template +++ b/Dockerfile-debian.template @@ -114,6 +114,7 @@ RUN { \ { \ echo 'apc.serializer=igbinary'; \ echo 'session.serialize_handler=igbinary'; \ + echo 'session.upload_progress.enabled=0'; \ } >> "${PHP_INI_DIR}/conf.d/docker-php-ext-igbinary.ini"; \ \ { \