← Go back to Info :: LinuxServer.io

PHP CVE-2026-109618/109619

October 22, 2026 at 12:00 PM

Security php babybuddy bookstack cops dokuwiki freshrss grav grocy heimdall kimai librespeed lychee nextcloud nginx phpmyadmin piwigo projectsend speedtest-tracker swag xbackbone


All supported images have now been updated with patched versions of PHP for the recently-disclosed vulnerabilities.

If you are using pinned image tags be aware that these patches will not be backported to older image versions.

The full list of affected images is:

babybuddy:latest
bookstack:latest
cops:latest
dokuwiki:latest
freshrss:latest
grav:latest
grocy:latest
heimdall:development
heimdall:latest
kimai:latest
librespeed:latest
lychee:latest
nextcloud:develop
nextcloud:latest
nextcloud:previous
nginx:latest
phpmyadmin:latest
piwigo:latest
projectsend:latest
speedtest-tracker:latest
swag:latest
xbackbone:latest
Last updated: October 22, 2026 at 10:48 AM