Update php-version #149

New Issue

Closed

opened 2026-10-21 14:17:33 +00:00 by jeppebundsgaard · 7 comments

jeppebundsgaard commented 2026-10-21 14:17:33 +00:00

Copy Link

Copy Source

When the security fix for https://www.php.net/archive/2026.php#2026-10-21-5 is ready in nextcloud, will you (maintainers) provide an update, or can someone help me with the commands necessary to update php in the nextcloud container?
See also https://github.com/nextcloud/all-in-one/issues/8876

When the security fix for https://www.php.net/archive/2026.php#2026-10-21-5 is ready in nextcloud, will you (maintainers) provide an update, or can someone help me with the commands necessary to update php in the nextcloud container? See also https://github.com/nextcloud/all-in-one/issues/8876

ineiti commented 2026-10-21 14:54:17 +00:00

Owner

Copy Link

Copy Source

I'm waiting for #148 to be accepted, so I can release a hotfix version, which is a bit more secure, but probably not as secure as updating to the fixed PHP.

Currently loop reloading https://hub.docker.com/_/nextcloud/ to see when the new 34.0.6 version comes out :)

I'm waiting for #148 to be accepted, so I can release a hotfix version, which is a bit more secure, but probably not as secure as updating to the fixed PHP. Currently loop reloading https://hub.docker.com/_/nextcloud/ to see when the new 34.0.6 version comes out :)

👍 1

ineiti commented 2026-10-21 15:03:24 +00:00

Owner

Copy Link

Copy Source

I'm tempted to override the "accept" needed for merging :)

But you can also

cd recipes/nextcloud
git pull
git remote set-branches --add origin mitigations_php && git fetch && git switch mitigations_php
cd ../..
abra app deploy -fC <your nextcloud domain>

IF YOU ARE ALREADY ON THE LATEST 15.0.0+34.0.5-fpm!

I'm tempted to override the "accept" needed for merging :) But you can also ``` cd recipes/nextcloud git pull git remote set-branches --add origin mitigations_php && git fetch && git switch mitigations_php cd ../.. abra app deploy -fC <your nextcloud domain> ``` IF YOU ARE ALREADY ON THE LATEST 15.0.0+34.0.5-fpm!

dannygroenewegen commented 2026-10-21 19:13:58 +00:00

Owner

Copy Link

Copy Source

Both nextcloud:33-fpm (→ 33.0.10) and nextcloud:34.0.5-fpm images have been rebuilt on top of the patched PHP image (8.4.27 / 8.5.12).

So redeploying (abra app deploy <domain> -f or undeploy+deploy) recipe versions 14.6.0+33-fpm or 15.0.0+34.0.5-fpm should get you the patched PHP version. Maybe some other Nextcloud image versions are also getting rebuilt with the patched PHP, but I have only verified these two.

After redeploying you can verify with:
abra app run <domain> app -- php -v

Should show PHP 8.4.27 for Nextcloud 33.x or PHP 8.5.12 for Nextcloud 34.x.

Both `nextcloud:33-fpm` (→ 33.0.10) and `nextcloud:34.0.5-fpm` images have been rebuilt on top of the patched PHP image (8.4.27 / 8.5.12). So redeploying (`abra app deploy <domain> -f` or undeploy+deploy) recipe versions `14.6.0+33-fpm` or `15.0.0+34.0.5-fpm` should get you the patched PHP version. Maybe some other Nextcloud image versions are also getting rebuilt with the patched PHP, but I have only verified these two. After redeploying you can verify with: `abra app run <domain> app -- php -v` Should show PHP 8.4.27 for Nextcloud 33.x or PHP 8.5.12 for Nextcloud 34.x.

jeppebundsgaard commented 2026-10-21 20:58:15 +00:00

Author

Copy Link

Copy Source

Thank you so much @dannygroenewegen and @ineiti !

i don't succeed in upgrading.

I have tried:

abra app deploy sky.fynsland.com 15.0.0+34.0.5-fpm

FATA unable to resolve '15.0.0+34.0.5-fpm': reference not found

and abra app deploy sky.fynsland.com just gives me the old version (33.0.7).

I am sorry for asking, but can you explain to me what the commands I need to do are?

Thank you so much @dannygroenewegen and @ineiti ! i don't succeed in upgrading. I have tried: `abra app deploy sky.fynsland.com 15.0.0+34.0.5-fpm` > FATA unable to resolve '15.0.0+34.0.5-fpm': reference not found and `abra app deploy sky.fynsland.com` just gives me the old version (33.0.7). I am sorry for asking, but can you explain to me what the commands I need to do are?

ineiti commented 2026-10-22 07:00:08 +00:00

Owner

Copy Link

Copy Source

You can try

abra app upgrade sky.fynsland.com

Alternatively you can do

abra app undeploy sky.fynsland.com
abra app deploy sky.fynsland.com

Which should fetch the updated version of 33.0.7 - check with

abra app run sky.fynsland.com app -- php -v

That the php version is updated.

You can try ``` abra app upgrade sky.fynsland.com ``` Alternatively you can do ``` abra app undeploy sky.fynsland.com abra app deploy sky.fynsland.com ``` Which should fetch the updated version of 33.0.7 - check with ``` abra app run sky.fynsland.com app -- php -v ``` That the php version is updated.

jeppebundsgaard commented 2026-10-22 07:21:28 +00:00

Author

Copy Link

Copy Source

Sorry for the stupid question - it turned out I had updated an earlier version manually/chaos, so the recipe was local. Abra wasn't very informative, but I should have done my research. I am now updated and calm. Thank you once again so much for doing this work!

Sorry for the stupid question - it turned out I had updated an earlier version manually/chaos, so the recipe was local. Abra wasn't very informative, but I should have done my research. I am now updated and calm. Thank you once again so much for doing this work!

jeppebundsgaard closed this issue 2026-10-22 07:21:28 +00:00

ineiti commented 2026-10-22 08:09:41 +00:00

Owner

Copy Link

Copy Source

Sorry for the stupid question - it turned out I had updated an earlier version manually/chaos, so the recipe was local. Abra wasn't very informative, but I should have done my research. I am now updated and calm. Thank you once again so much for doing this work!

I definitely hate abra for its very opinionated handling of chaos/versions/failures/ssh-errors - there is a long list of things I'd change if I'd have the time...

> Sorry for the stupid question - it turned out I had updated an earlier version manually/chaos, so the recipe was local. Abra wasn't very informative, but I should have done my research. I am now updated and calm. Thank you once again so much for doing this work! I definitely hate abra for its very opinionated handling of chaos/versions/failures/ssh-errors - there is a long list of things I'd change if I'd have the time...

Sign in to join this conversation.

No Branch/Tag Specified

Branches Tags

main

renovate/ghcr.io-nextcloud-releases-whiteboard-2.x

pr-15.0.1+34.0.5-fpm

kc_stable

mitigations_php

version_35

after-pr-143-cherry-pick

pr-143-review

renovate/docker.elastic.co-elasticsearch-elasticsearch-9.x

pr-125-v2

pr-125

renovate/mariadb-13.x

trusted-domains

renovate/pgautoupgrade-pgautoupgrade-18.x

pr-15.2.0+34.0.2-fpm

pr-14.2.0+33-fpm

fix-pgautoupgrade-max-connections

upload-limit

feature/imaginary

15.0.0+34.0.5-fpm

14.6.0+33-fpm

14.5.1+33.0.9-fpm

14.5.0+33.0.9-fpm

14.4.0+33.0.9-fpm

14.3.0+33.0.9-fpm

14.2.0+33.0.9-fpm

14.1.2+33.0.9-fpm

14.1.1+33.0.8-fpm

14.1.0+33.0.7-fpm

14.0.1+33.0.7-fpm

14.0.0+33.0.7-fpm

13.2.0+32-fpm

13.1.5+32.0.13-fpm

13.1.4+32.0.13-fpm

13.1.3+32.0.13-fpm

13.1.2+32.0.13-fpm

13.1.1+32.0.12-fpm

13.1.0+32.0.11-fpm

13.0.1+32.0.3-fpm

13.0.0+32.0.3-fpm

12.1.0+31.0.6-fpm

12.0.1+31.0.6-fpm

12.0.0+31.0.6-fpm

11.4.0+30.0.6-fpm

11.4.0+30.0.10-fpm

11.3.0+30.0.6-fpm

11.2.0+30.0.6-fpm

11.1.0+30.0.6-fpm

11.0.1+30.0.4-fpm

11.0.0+30.0.4-fpm

10.0.0+30.0.4-fpm

9.2.0+29.0.8-fpm

6.0.11+28.0.10-fpm

6.0.10+28.0.10-fpm

6.0.9+28.0.10-fpm

9.1.2+29.0.5-fpm

6.0.8+28.0.5-fpm

6.0.7+28.0.5-fpm

9.1.0+29.0.5-fpm

9.0.0+29.0.5-fpm

6.0.6+28.0.5-fpm

8.0.1+29.0.3-fpm

8.0.0+29.0.1-fpm

7.0.3+29.0.1-fpm

6.0.5+28.0.5-fpm

7.0.2+29.0.1-fpm

7.0.1+29.0.1-fpm

7.0.0+29.0.0-fpm

6.0.4+28.0.5-fpm

6.0.3+28.0.5-fpm

6.0.2+28.0.5-fpm

5.0.3+27.0.1-fpm

6.0.1+28.0.2-fpm

6.0.0+28.0.1-fpm

5.2.0+27.1.5-fpm

5.1.1+27.1.5-fpm

5.1.0+27.1.3-fpm

5.0.2+27.0.1-fpm

5.0.1+27.0.1-fpm

5.0.0+27.0.0-fpm

4.0.7+26.0.2-fpm

4.0.6+26.0.2-fpm

4.0.5+26.0.2-fpm

4.0.4+26.0.2-fpm

4.0.3+26.0.2-fpm

4.0.2+26.0.2-fpm

4.0.1+26.0.1-fpm

4.0.0+26.0.1-fpm

3.3.2+25.0.6-fpm

3.3.1+25.0.5-fpm

3.3.0+25.0.5-fpm

3.2.0+25.0.4-fpm

3.1.2+25.0.4-fpm

3.1.1+25.0.1-fpm

3.1.0+25.0.1-fpm

3.0.1+25.0.1-fpm

3.0.0+25.0.1-fpm

2.1.4+24.0.6-fpm

2.1.3+24.0.5-fpm

2.1.2+24.0.3-fpm

2.1.1+24.0.2-fpm

2.1.0+24.0.0-fpm

2.0.0+23.0.4-fpm

1.0.0+23.0.1-fpm

Labels

Clear labels

bug

Something is not working

documentation

For issues that are calling out documentation gap

duplicate

This issue or pull request already exists

enhancement

New feature

help wanted

Need some help

invalid

Something is wrong

question

More information is needed

wontfix

This won't be fixed

No labels

Milestone

No items

No Milestone

Assignees

Clear assignees

3wordchant aadil (Aadil Ayub) abra-bot (Abra Bot) ammaratef45 amras (Sarma) BornDeleuze (Born Deleuze) Brooke carla cas (Cassowary) coopcloud dannygroenewegen (Danny Groenewegen) decentral1se (d1) fauno (fauno) ineiti (Linus Gasser) javielico (Javielico) jjsfunhouse kawaiipunk (KawaiiPunk) knoflook moosemower moritz notplants oxaliq (sorrel) p4u1 (p4u1) renovate-bot (Comrade Renovate Bot) simon stevensting (stevensting) trav (Trav Fryer) yksflip

No Assignees

3 Participants

Notifications

Subscribe

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: coop-cloud/nextcloud#149