From c0b1321479f30cc2c0cfe3cd59e647a5ee2ba587 Mon Sep 17 00:00:00 2001
From: kuaifan <aipaw@live.cn>
Date: Thu, 22 Oct 2026 05:53:26 +0000
Subject: [PATCH] =?UTF-8?q?fix(docker):=20PHP=20=E9=95=9C=E5=83=8F?=
 =?UTF-8?q?=E5=8D=87=E7=BA=A7=E8=87=B3=20swoole-8.4.27=20=E4=BF=AE?=
 =?UTF-8?q?=E5=A4=8D=20CVE-2026-109618/109619?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .github/workflows/tests.yml | 2 +-
 docker-compose.yml          | 2 +-
 docker/php/php.ini          | 3 ++-
 3 files changed, 4 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
index abf75a545..b3797a88a 100644
--- a/.github/workflows/tests.yml
+++ b/.github/workflows/tests.yml
@@ -66,7 +66,7 @@ jobs:
       - name: Run PHPUnit in DooTask PHP image
         run: |
           docker run --rm --network host -v "$GITHUB_WORKSPACE":/var/www -w /var/www \
-            kuaifan/php:swoole-8.4 sh -c '
+            kuaifan/php:swoole-8.4.27 sh -c '
               composer install --prefer-dist --no-interaction &&
               cp .env.example .env &&
               sed -i "s/^DB_HOST=.*/DB_HOST=127.0.0.1/" .env &&
diff --git a/docker-compose.yml b/docker-compose.yml
index 5a3084d12..581018b21 100755
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -1,7 +1,7 @@
 services:
   php:
     container_name: "dootask-php-${APP_ID}"
-    image: "kuaifan/php:swoole-8.4"
+    image: "kuaifan/php:swoole-8.4.27"
     shm_size: 2G
     ulimits:
       core:
diff --git a/docker/php/php.ini b/docker/php/php.ini
index 4ff560963..3b0a68133 100644
--- a/docker/php/php.ini
+++ b/docker/php/php.ini
@@ -1518,7 +1518,8 @@ session.sid_bits_per_character = 5
 ; Development Value: On
 ; Production Value: On
 ; http://php.net/session.upload-progress.enabled
-;session.upload_progress.enabled = On
+; 关闭以缓解 CVE-2026-109619（项目使用 Laravel session，不依赖此功能）
+session.upload_progress.enabled = Off
 
 ; Cleanup the progress information as soon as all POST data has been read
 ; (i.e. upload completed).