Skip to content

[SEC] ⚠️ PHP Critical CVEs need PHP update #549

Closed as not planned
Closed as not planned

Description

@lightlike

Is this a new feature request?

  • I have searched the existing issues

Wanted change

Update of PHP to 8.5.12 after 2 critical vulnerabilities.

See: CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) and CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp)

See original nextcloud issue here: nextcloud/server#65754

Updates are out now and can be applied.

Reported here instead of via mail to avoid spamming the mail and to track this for everyone. This also contains no secret info.

Reason for change

To avoid and fix security issues

Proposed code change

No response

Activity

  1. github-actions commented on Oct 21, 2026

    @github-actions

    Thanks for opening your first issue here! Be sure to follow the relevant issue templates, or risk having this issue marked as invalid.

  2. aptalca commented on Oct 21, 2026

    @aptalca
    Member
  3. moved this from Issues to Done in Issue & PR Trackeron Oct 21, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions