PHP needs an update?

Is this a new feature request?

I have searched the existing issues

Wanted change

Heya,

not sure if this image needs a new version to fix the currently rampaging two CVEs in PHP?

rgds, Kira

Reason for change

PHP CVEs

Proposed code change

No response

Thanks for opening your first issue here! Be sure to follow the relevant issue templates, or risk having this issue marked as invalid.

It does.

root@bookstack-5c58c45b9f-284rf:/# php -v
PHP 8.5.11 (cli) (built: Sep 25 2026 15:57:29) (NTS)
Copyright (c) The PHP Group
Built by Alpine Linux aports
Zend Engine v4.5.11, Copyright (c) Zend Technologies
    with Zend OPcache v8.5.11, Copyright (c), by Zend Technologies

As do all our other php based images.

To anyone that stumbles upon this, please refrain from opening issues about this on our other repos. We're getting this patched as fast as we can and are dependant on upstream sources releasing their packages.

linuxserver/Heimdall#1614 (comment)

Images should now be built

@Roxedus

@Roxedus Thank you for all the hard work--I wanted to ask if images built on PHP 8.4 will be updated as well? Here is what I am seeing:

docker run --rm --entrypoint php lscr.io/linuxserver/bookstack:version-v25.11.6 -v 
PHP 8.4.16 (cli) (built: Dec 21 2025 18:29:54) (NTS)
Copyright (c) The PHP Group
Zend Engine v4.4.16, Copyright (c) Zend Technologies
    with Zend OPcache v8.4.16, Copyright (c), by Zend Technologies

...and the minimum version we need is 8.4.27.

If the answer is "we're patching 8.5 everywhere first", I completely understand.

Thanks,

-- Doug

It's been nearly a year since Bookstack was being built with PHP 8.4, so the answer is no, that version will never get patched because we haven't build v25.11.6 since December 2025.

We are only building the latest version of the app, which is 26, if you need 25, you need to maintain that yourself. There might be a 3.23 baseimage ready for consumption at some point, Alpine is still building those packages.

@thespad

@thespad @Roxedus Completely fair. I will upgrade on my end.

Just to add, even if the linuxserver team did patch old v25.11.6, you'd still be left with many BookStack level vulnerabilities!

Thanks linuxserver team for your continued work!

Navigation Menu

PHP needs an update? #301

Is this a new feature request?

Wanted change

Reason for change

Proposed code change

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

PHP needs an update? #301

Description

Is this a new feature request?

Wanted change

Reason for change

Proposed code change

Activity

github-actions commented on Oct 21, 2026

Xeroxxx commented on Oct 21, 2026

j0nnymoe commented on Oct 21, 2026

aptalca commented on Oct 21, 2026

Roxedus commented on Oct 21, 2026

dmuth commented on Oct 21, 2026

thespad commented on Oct 21, 2026

Roxedus commented on Oct 21, 2026

dmuth commented on Oct 21, 2026

ssddanbrown commented on Oct 21, 2026

Metadata

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Issue actions