From 91ec95a4a9ea556ed80b0b590e90d2171ec77e2f Mon Sep 17 00:00:00 2001 From: David Dyer Date: Thu, 22 Oct 2026 17:35:44 -0400 Subject: [PATCH] Upgrade PHP image to 8.5-apache PHP 8.3.33 (running in prod) is vulnerable to the PHP2Shell RCE flaws (CVE-2026-109618, CVE-2026-109619) fixed upstream in 8.3.36/8.4.27/8.5.12. 8.5 also has the longest remaining support window and matches the local dev PHP version already in use. Co-Authored-By: Claude Sonnet 5 --- docker-compose.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/docker-compose.yaml b/docker-compose.yaml index 9d95e2d..38c4034 100644 --- a/docker-compose.yaml +++ b/docker-compose.yaml @@ -7,7 +7,7 @@ networks: services: php-server: - image: php:8.3-apache + image: php:8.5-apache container_name: the-old-fitz restart: unless-stopped networks: @@ -39,7 +39,7 @@ x-casaos: port_map: "80" scheme: http tagline: - en_us: PHP 8.3 + Apache web server. + en_us: PHP 8.5 + Apache web server. thumbnail: https://www.php.net/images/logos/php-logo.svg title: en_us: PHP Server