- Update curl to 8.23.0 and c-ares to 1.34.9 by @crazy-max in #609
Important
This release also rebuilds the Alpine image with PHP 8.5.12.
PHP 8.5.12 fixes CVE-2026-109618 and CVE-2026-109619, two critical vulnerabilities that can allow remote code execution without authentication. These affect PHP installations serving web requests, including PHP-FPM used by this image. See the PHP security advisory for details.
Pull the updated image and recreate your containers to apply the fixes.
Full Changelog: 5.3.18-0.16.25-r0...5.3.18-0.16.25-r1