From 9b3a19d2a826a286fb80ebe42aba4e2f5ccb2858 Mon Sep 17 00:00:00 2001 From: chris Date: Fri, 23 Oct 2026 13:38:01 +0200 Subject: [PATCH 1/2] php suggest to protect against unlikely RCE --- nextcloud/99-security-hardening.ini | 9 ++++++++- 1 file changed, 8 insertions(+), 1 deletion(-) diff --git a/nextcloud/99-security-hardening.ini b/nextcloud/99-security-hardening.ini index 90a4b57..80c7593 100644 --- a/nextcloud/99-security-hardening.ini +++ b/nextcloud/99-security-hardening.ini @@ -5,5 +5,12 @@ ; vulnerability. It is disabled by default for maximum compatibility, but ; enabling it is encouraged. ; https://wiki.php.net/rfc/strict_sessions -session.use_strict_mode = 1 +session.use_strict_mode = 1\ +; Enable upload progress tracking in $_SESSION +; Default Value: On +; Development Value: On +; Production Value: On +; https://php.net/session.upload-progress.enabled +; Warum, siehe hier: https://www.php.net/archive/2026.php#2026-10-23-1 +session.upload_progress.enabled = Off From c13790491a7de1cc219d0db10f06230314417a2d Mon Sep 17 00:00:00 2001 From: Renovate Date: Thu, 5 Nov 2026 20:18:13 +0000 Subject: [PATCH 2/2] Update quay.io/keycloak/keycloak Docker tag to v26.8.2 --- .forgejo/workflows/build_keycloak.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.forgejo/workflows/build_keycloak.yml b/.forgejo/workflows/build_keycloak.yml index 74cc8b2..3b870ba 100644 --- a/.forgejo/workflows/build_keycloak.yml +++ b/.forgejo/workflows/build_keycloak.yml @@ -19,7 +19,7 @@ jobs: matrix: keycloak-version: # renovate: datasource=docker depName=quay.io/keycloak/keycloak - - 26.8.1 + - 26.8.2 steps: - name: Install required system packages run: apk add --no-cache nodejs