Skip to content

[security] Update to 8.5.12, 8.4.27, 8.3.36, 8.2.35 - #1694

Merged
LaurentGoderre merged 1 commit into
docker-library:masterfrom
jnoordsij:security-fixes
Oct 21, 2026
Merged

LaurentGoderre merged 1 commit into
docker-library:masterfrom
jnoordsij:security-fixes

Conversation

@jnoordsij

@jnoordsij jnoordsij commented Oct 21, 2026 •

Copy link
Copy Markdown
Contributor

See also https://www.php.net/archive/2026.php#2026-10-21-5.

See also #1693.

FAQ

  1. Why is this not merged yet?

I'm not a maintainer and can not merge this. Please wait until a maintainer has come around to look into this.

  1. This is merged, but I cannot find the image?

After this PR has been merged, more steps are to be taken, including an upstream merge on docker-library/official-images and subsequent image builds. For a full description of the timeline, please refer to https://github.com/docker-library/faq#an-images-source-changed-in-git-now-what.

@RobinGeuze

Copy link
Copy Markdown

@tianon any chance you can approve this ASAP?

@ben221199

Copy link
Copy Markdown

Why is this not merged yet?

I guess because the CI is still running.

@jonbk

jonbk commented Oct 21, 2026

Copy link
Copy Markdown

why dropping many rc versions in this PR ?

@DanielEScherzer DanielEScherzer left a comment •

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Speaking as a PHP release manager for 8.5: thanks for sending this!

Speaking as someone who uses the docker image to run their site: thanks for doing this!

[edit since people are tagging me in comments: I don't have merge access to this repository, I can't do anything here]

@henderkes

Copy link
Copy Markdown
Contributor

why dropping many rc versions in this PR ?

Because e.g. 8.5.12 supercedes 8.5.12-RC1. There is no 8.5.13-RC1 yet.

@xadacka

xadacka commented Oct 21, 2026

Copy link
Copy Markdown

I've never watched github actions so intensely

@julian-d

Copy link
Copy Markdown

Good portion of the PHP community in a pull request. Wish you all good luck!
Thanks for opening the PR

@Bash-Ninja

Copy link
Copy Markdown

Hopefully CI will be ready soon

@naka-sho

Copy link
Copy Markdown

thx

@PurHur

PurHur commented Oct 21, 2026

Copy link
Copy Markdown

Please merge asap

@mmihalev

Copy link
Copy Markdown

2 CI checks to go

@bloodn1nj4

Copy link
Copy Markdown

Thanks for the PR. Glad we are all here together for this. 😂

@Elaktrato

Copy link
Copy Markdown

Imagine, we're all watching. And the last job just fails and it doesn't merge in time 😅

@SavageTiger

Copy link
Copy Markdown

Not all heroes wear capes 🥇

@RWL-Dittrich

Copy link
Copy Markdown

And the most watched PR of the day goes tooooo.......

@PhoenixxClaw

Copy link
Copy Markdown

Imagine, we're all watching. And the last job just fails and it doesn't merge in time 😅

Don't jinx it now! 😂

@pixelflowxyz

Copy link
Copy Markdown

come on github actions, you can do it, i believe

@PatrickHuiskens

Copy link
Copy Markdown

Guys, does anyone know about a PHP issue going on right now?

@PurHur

PurHur commented Oct 21, 2026

Copy link
Copy Markdown

This MR is more live that twitter

@martinrw

Copy link
Copy Markdown

What a nice community moment

@Hedius

Hedius commented Oct 21, 2026

Copy link
Copy Markdown

incoming fail :p

@tavsec

tavsec commented Oct 21, 2026

Copy link
Copy Markdown

LGTM, merge!

@nicobleiler

Copy link
Copy Markdown

Imagine if GitHub or GitHub actions go down again xD

@hktang

hktang commented Oct 21, 2026

Copy link
Copy Markdown
The button

Happiness

@TixieSalander

Copy link
Copy Markdown

Support to the families of the mailboxes of those who have subscribed to that ticket 😔✊

@paulo-hortelan

Copy link
Copy Markdown

Hi, we've been trying to reach you about your car's extended warranty

@hazaveh

hazaveh commented Oct 21, 2026

Copy link
Copy Markdown

am I the only one who didn't take his apps offline?

@valenb

valenb commented Oct 21, 2026

Copy link
Copy Markdown

lesgo

@jbleijenberg-ehvg

Copy link
Copy Markdown

Brooks was here.

I'm not Brooks, but i'm sure he was here.

@robertragas

Copy link
Copy Markdown

@jochemvn

havingfunatthecomputer

@hyeongukryu

Copy link
Copy Markdown

😨

@xtNathanAugusto

Copy link
Copy Markdown

LFG

@Maryana-B

Copy link
Copy Markdown
image

@elcapo

elcapo commented Oct 21, 2026

Copy link
Copy Markdown

Come on @DanielEScherzer! We all love you! Let's go!

@toshikidev821

Copy link
Copy Markdown

早く!

@hellfull

Copy link
Copy Markdown

I m here for the memes, take your time

@AchrafBardan

Copy link
Copy Markdown

Bro come on, my boss is getting angry. Start merging.

@GuusAtWork

Copy link
Copy Markdown

🙏

@Tamer7

Tamer7 commented Oct 21, 2026

Copy link
Copy Markdown
6 7 Speed GIF

@benpayne-hunt

Copy link
Copy Markdown

We've got an approval!

Wahoo! 🎉

@sylvain-billie

Copy link
Copy Markdown

step 1: watch github break
step2: watch dockerhub break

@kkevindev

Copy link
Copy Markdown
afbeelding

@kratkyzobak

Copy link
Copy Markdown

This waiting is just failure of supply chain :/ EVERYONE knew. Cloudflare can release WAF rules to mitigate, but noone in Docker can be prepared to merge this? WTF?

@aporat

aporat commented Oct 21, 2026

Copy link
Copy Markdown

I hope there isnt any Skynet code hidden inside 8.5.12. 80% of the internet is getting this patch

@TimothyGs

Copy link
Copy Markdown
giphy

@ayano-kobayashi-lvgs

Copy link
Copy Markdown

頑張れ!

@Maryana-B

Copy link
Copy Markdown
image

@RWL-Dittrich

Copy link
Copy Markdown
image

@epidoux

epidoux commented Oct 21, 2026

Copy link
Copy Markdown
image

@docker-library docker-library locked as too heated and limited conversation to collaborators Oct 21, 2026
@LaurentGoderre
LaurentGoderre merged commit e3eaff8 into docker-library:master Oct 21, 2026
68 checks passed
@jnoordsij
jnoordsij deleted the security-fixes branch October 21, 2026 14:21
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.