From 816034cc2997ea848e4fe5c399826b6faeb05e80 Mon Sep 17 00:00:00 2001
From: berce <75228263+bercedev@users.noreply.github.com>
Date: Thu, 22 Oct 2026 16:33:40 +0300
Subject: [PATCH] fix(docker): bump PHP to 8.5.12 for PHP2Shell
 (CVE-2026-109618, CVE-2026-109619)

---
 Dockerfile | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/Dockerfile b/Dockerfile
index b42fb19af6..d003a9a4f5 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -4,7 +4,7 @@
 #
 
 # Stage 1: Composer dependencies with PHP extensions
-FROM php:8.5.2-cli AS composer
+FROM php:8.5.12-cli AS composer
 
 RUN apt-get update && apt-get install -y \
     git unzip libpng-dev libjpeg-dev libfreetype6-dev libzip-dev libicu-dev libpq-dev libldap2-dev libbz2-dev libsodium-dev \
@@ -22,7 +22,7 @@ COPY composer.json composer.lock ./
 RUN composer install --no-interaction --prefer-dist --optimize-autoloader --verbose
 
 # Stage 2: PHP runtime with same extensions
-FROM php:8.5.2-cli
+FROM php:8.5.12-cli
 
 # Install necessary system dependencies again (clean stage)
 RUN apt-get update && apt-get install -y \