Still vulnerable to PHP2shell? #155

New Issue

Closed

opened 2026-10-22 14:05:29 +00:00 by kawaiipunk · 2 comments

kawaiipunk commented 2026-10-22 14:05:29 +00:00

Owner

Copy Link

Copy Source

I'm not seeing a new php version after a redeploy

root@001359819e4c:/var/www/html# php -v
PHP 8.4.26 (cli) (built: Oct  6 2026 01:25:30) (NTS)

I ran:

abra app deploy foo.bar 14.2.0+33.0.9-fpm

Should be 8.4.27

I'm not seeing a new php version after a redeploy ``` root@001359819e4c:/var/www/html# php -v PHP 8.4.26 (cli) (built: Oct 6 2026 01:25:30) (NTS) ``` I ran: ``` abra app deploy foo.bar 14.2.0+33.0.9-fpm ``` Should be 8.4.27

dannygroenewegen commented 2026-10-22 18:45:52 +00:00

Owner

Copy Link

Copy Source

Upgrading to recipe 14.6.0+33-fpm should get you an updated Nextcloud docker image. 33-fpm currently points to 33.0.10-fpm.

Upgrading to recipe `14.6.0+33-fpm` should get you an updated Nextcloud docker image. 33-fpm currently points to 33.0.10-fpm.

ineiti commented 2026-10-22 19:00:52 +00:00

Owner

Copy Link

Copy Source

Yes, nextcloud only updated the latest tags of their nextcloud images.

Yes, nextcloud only updated the latest tags of their nextcloud images.

ineiti closed this issue 2026-10-22 19:01:12 +00:00

Sign in to join this conversation.

No Branch/Tag Specified

Branches Tags

main

renovate/ghcr.io-nextcloud-releases-whiteboard-2.x

kc_stable

mitigations_php

version_35

after-pr-143-cherry-pick

pr-143-review

renovate/docker.elastic.co-elasticsearch-elasticsearch-9.x

pr-125-v2

pr-125

renovate/mariadb-13.x

trusted-domains

renovate/pgautoupgrade-pgautoupgrade-18.x

pr-15.2.0+34.0.2-fpm

pr-14.2.0+33-fpm

fix-pgautoupgrade-max-connections

upload-limit

feature/imaginary

15.0.1+34.0.5-fpm

15.0.0+34.0.5-fpm

14.6.0+33-fpm

14.5.1+33.0.9-fpm

14.5.0+33.0.9-fpm

14.4.0+33.0.9-fpm

14.3.0+33.0.9-fpm

14.2.0+33.0.9-fpm

14.1.2+33.0.9-fpm

14.1.1+33.0.8-fpm

14.1.0+33.0.7-fpm

14.0.1+33.0.7-fpm

14.0.0+33.0.7-fpm

13.2.0+32-fpm

13.1.5+32.0.13-fpm

13.1.4+32.0.13-fpm

13.1.3+32.0.13-fpm

13.1.2+32.0.13-fpm

13.1.1+32.0.12-fpm

13.1.0+32.0.11-fpm

13.0.1+32.0.3-fpm

13.0.0+32.0.3-fpm

12.1.0+31.0.6-fpm

12.0.1+31.0.6-fpm

12.0.0+31.0.6-fpm

11.4.0+30.0.6-fpm

11.4.0+30.0.10-fpm

11.3.0+30.0.6-fpm

11.2.0+30.0.6-fpm

11.1.0+30.0.6-fpm

11.0.1+30.0.4-fpm

11.0.0+30.0.4-fpm

10.0.0+30.0.4-fpm

9.2.0+29.0.8-fpm

6.0.11+28.0.10-fpm

6.0.10+28.0.10-fpm

6.0.9+28.0.10-fpm

9.1.2+29.0.5-fpm

6.0.8+28.0.5-fpm

6.0.7+28.0.5-fpm

9.1.0+29.0.5-fpm

9.0.0+29.0.5-fpm

6.0.6+28.0.5-fpm

8.0.1+29.0.3-fpm

8.0.0+29.0.1-fpm

7.0.3+29.0.1-fpm

6.0.5+28.0.5-fpm

7.0.2+29.0.1-fpm

7.0.1+29.0.1-fpm

7.0.0+29.0.0-fpm

6.0.4+28.0.5-fpm

6.0.3+28.0.5-fpm

6.0.2+28.0.5-fpm

5.0.3+27.0.1-fpm

6.0.1+28.0.2-fpm

6.0.0+28.0.1-fpm

5.2.0+27.1.5-fpm

5.1.1+27.1.5-fpm

5.1.0+27.1.3-fpm

5.0.2+27.0.1-fpm

5.0.1+27.0.1-fpm

5.0.0+27.0.0-fpm

4.0.7+26.0.2-fpm

4.0.6+26.0.2-fpm

4.0.5+26.0.2-fpm

4.0.4+26.0.2-fpm

4.0.3+26.0.2-fpm

4.0.2+26.0.2-fpm

4.0.1+26.0.1-fpm

4.0.0+26.0.1-fpm

3.3.2+25.0.6-fpm

3.3.1+25.0.5-fpm

3.3.0+25.0.5-fpm

3.2.0+25.0.4-fpm

3.1.2+25.0.4-fpm

3.1.1+25.0.1-fpm

3.1.0+25.0.1-fpm

3.0.1+25.0.1-fpm

3.0.0+25.0.1-fpm

2.1.4+24.0.6-fpm

2.1.3+24.0.5-fpm

2.1.2+24.0.3-fpm

2.1.1+24.0.2-fpm

2.1.0+24.0.0-fpm

2.0.0+23.0.4-fpm

1.0.0+23.0.1-fpm

Labels

Clear labels

bug

Something is not working

documentation

For issues that are calling out documentation gap

duplicate

This issue or pull request already exists

enhancement

New feature

help wanted

Need some help

invalid

Something is wrong

question

More information is needed

wontfix

This won't be fixed

No labels

Milestone

No items

No Milestone

Assignees

Clear assignees

3wordchant aadil (Aadil Ayub) abra-bot (Abra Bot) ammaratef45 amras (Sarma) BornDeleuze (Born Deleuze) Brooke carla cas (Cassowary) coopcloud dannygroenewegen (Danny Groenewegen) decentral1se (d1) fauno (fauno) hex (Josh Dukes) ineiti (Linus Gasser) javielico (Javielico) jjsfunhouse kawaiipunk (KawaiiPunk) knoflook moosemower moritz notplants oxaliq (sorrel) p4u1 (p4u1) renovate-bot (Comrade Renovate Bot) simon stevensting (stevensting) trav (Trav Fryer) yksflip

No Assignees

3 Participants

Notifications

Subscribe

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: coop-cloud/nextcloud#155