You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
Repository navigation
PHP security updates for CVE-2026-109618 and CVE-2026-109619 #248
we already use the frankenphp-otel package - and noticed that the update for this package is still missing.
Can you estiamte when even this build is made?
Activity
laf0rge commentedon Oct 21, 2026
https://www.php.net/index.php#2026-10-20-1 for reference
shyim commentedon Oct 21, 2026
we're on it.
docker hub is not released yet. we're looking two ways to come fast out:
in parallel
shyim commentedon Oct 21, 2026
But I expect that we will come first out with the FPM/Caddy/Nginx images as frankenphp is an additional stage 😭
shyim commentedon Oct 21, 2026
It's building https://github.com/shopware/docker/actions/runs/39623519153/job/119308549109
running with full power
yanbreu commentedon Oct 21, 2026
Thanks! For the workaround!
Just as fyi: It looks like the patched php versions are now
availableempty on docker hub.Example: https://hub.docker.com/_/php/tags?name=8.4.27
shyim commentedon Oct 21, 2026
yes but they are still empty when you click on them 😭 https://hub.docker.com/layers/library/php/8.4.27-zts-trixie/images/sha256-eb37f58646a901dc7727cf448cae36daaefaba79de33b5058dab79aa4c04aefb
yanbreu commentedon Oct 21, 2026
My bad! I should have checked it better..
Hopefully next security patch version will have better/faster support/awareness for official php docker images. 😄
shyim commentedon Oct 21, 2026
all productiion relevant images are out
tbkojote commentedon Oct 21, 2026
Hi Soner,
we already use the frankenphp-otel package - and noticed that the update for this package is still missing.
Can you estiamte when even this build is made?
thanks a lot!
sneakyvv commentedon Oct 21, 2026
idd build for frankenphp-otel failed => https://github.com/shopware/docker/actions/runs/39623519153/job/119326115636
shyim commentedon Oct 21, 2026
sorry working on it 🙈
shyim commentedon Oct 21, 2026
Done!
dionysm commentedon Oct 21, 2026
Thank you!
rf-jm commentedon Oct 21, 2026
All working, thank you and let's hope these security issues won't be regular thing.
shyim commentedon Oct 21, 2026
We will definitively do an post-mortem to be next time faster and communication. I think this will happen more regularly
weselben commentedon Oct 21, 2026
I agree, AI will accelerate this type of incidence way more often in the upcoming Months!