From 460e3dcf67d0380780f3e2887a9125cbf556b619 Mon Sep 17 00:00:00 2001 From: Renn F Date: Wed, 21 Oct 2026 17:45:47 +0200 Subject: [PATCH] fix(docker): pin the PHP base image to 8.3.36 PHP 8.3.36 fixes CVE-2026-109618 and CVE-2026-109619, two unauthenticated remote code execution flaws in PHP that serves web requests. The example images run PHP's built-in web server, so the floating 8.3 tag could still resolve to an unpatched build; this pins the patched release. --- examples/advanced_app/Dockerfile | 2 +- examples/simple_app/Dockerfile | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/examples/advanced_app/Dockerfile b/examples/advanced_app/Dockerfile index ab316ae..54b2ac8 100644 --- a/examples/advanced_app/Dockerfile +++ b/examples/advanced_app/Dockerfile @@ -13,7 +13,7 @@ RUN --mount=type=secret,id=github_token \ fi && \ composer install --no-interaction --no-progress --prefer-dist --no-dev -FROM php:8.3-cli-alpine +FROM php:8.3.36-cli-alpine RUN addgroup -S guard && adduser -S -G guard guard diff --git a/examples/simple_app/Dockerfile b/examples/simple_app/Dockerfile index 8cd3453..4ad4bb9 100644 --- a/examples/simple_app/Dockerfile +++ b/examples/simple_app/Dockerfile @@ -13,7 +13,7 @@ RUN --mount=type=secret,id=github_token \ fi && \ composer install --no-interaction --no-progress --prefer-dist --no-dev -FROM php:8.3-cli-alpine +FROM php:8.3.36-cli-alpine WORKDIR /app