https://info.linuxserver.io/affected/php/Historygithub.com/cstateen2026-10-22T12:00:00+00:002026-10-22T12:00:00+00:00https://info.linuxserver.io/issues/2026-10-22-php-cve-2026-109618/Thu, 22 Oct 2026 12:00:00 +0000https://info.linuxserver.io/issues/2026-10-22-php-cve-2026-109618/<p>All supported images have now been updated with patched versions of PHP for the recently-disclosed vulnerabilities.</p> <p>If you are using pinned image tags be aware that these patches will <em>not</em> be backported to older image versions.</p> <p>The full list of affected images is:</p> <div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-text" data-lang="text"><span style="display:flex;"><span>babybuddy:latest </span></span><span style="display:flex;"><span>bookstack:latest </span></span><span style="display:flex;"><span>cops:latest </span></span><span style="display:flex;"><span>dokuwiki:latest </span></span><span style="display:flex;"><span>freshrss:latest </span></span><span style="display:flex;"><span>grav:latest </span></span><span style="display:flex;"><span>grocy:latest </span></span><span style="display:flex;"><span>heimdall:development </span></span><span style="display:flex;"><span>heimdall:latest </span></span><span style="display:flex;"><span>kimai:latest </span></span><span style="display:flex;"><span>librespeed:latest </span></span><span style="display:flex;"><span>lychee:latest </span></span><span style="display:flex;"><span>nextcloud:develop </span></span><span style="display:flex;"><span>nextcloud:latest </span></span><span style="display:flex;"><span>nextcloud:previous </span></span><span style="display:flex;"><span>nginx:latest </span></span><span style="display:flex;"><span>phpmyadmin:latest </span></span><span style="display:flex;"><span>piwigo:latest </span></span><span style="display:flex;"><span>projectsend:latest </span></span><span style="display:flex;"><span>speedtest-tracker:latest </span></span><span style="display:flex;"><span>swag:latest </span></span><span style="display:flex;"><span>xbackbone:latest </span></span></code></pre></div><p>All supported images have now been updated with patched versions of PHP for the recently-disclosed vulnerabilities.</p> <p>If you are using pinned image tags be aware that these patches will <em>not</em> be backported to older image versions.</p> <p>The full list of affected images is:</p> <div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-text" data-lang="text"><span style="display:flex;"><span>babybuddy:latest </span></span><span style="display:flex;"><span>bookstack:latest </span></span><span style="display:flex;"><span>cops:latest </span></span><span style="display:flex;"><span>dokuwiki:latest </span></span><span style="display:flex;"><span>freshrss:latest </span></span><span style="display:flex;"><span>grav:latest </span></span><span style="display:flex;"><span>grocy:latest </span></span><span style="display:flex;"><span>heimdall:development </span></span><span style="display:flex;"><span>heimdall:latest </span></span><span style="display:flex;"><span>kimai:latest </span></span><span style="display:flex;"><span>librespeed:latest </span></span><span style="display:flex;"><span>lychee:latest </span></span><span style="display:flex;"><span>nextcloud:develop </span></span><span style="display:flex;"><span>nextcloud:latest </span></span><span style="display:flex;"><span>nextcloud:previous </span></span><span style="display:flex;"><span>nginx:latest </span></span><span style="display:flex;"><span>phpmyadmin:latest </span></span><span style="display:flex;"><span>piwigo:latest </span></span><span style="display:flex;"><span>projectsend:latest </span></span><span style="display:flex;"><span>speedtest-tracker:latest </span></span><span style="display:flex;"><span>swag:latest </span></span><span style="display:flex;"><span>xbackbone:latest </span></span></code></pre></div>