Skip to content

fix(docker): update owncloud/base:24.04 to PHP 8.3.6-0ubuntu0.24.04.13 #733

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
oc-tmueller merged 2 commits into from
Oct 21, 2026
Merged

fix(docker): update owncloud/base:24.04 to PHP 8.3.6-0ubuntu0.24.04.13 #733

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
cf88fb0
fix(docker): update owncloud/base:24.04 to PHP 8.3.6-0ubuntu0.24.04.13
oc-tmueller Oct 21, 2026
9235a04
fix(trivy): accept CVE-2026-111943 in the bundled rclone for 11.0.1
oc-tmueller Oct 21, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
12 changes: 12 additions & 0 deletions v24.04/11.0.1/.trivyignore
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -39,3 +39,15 @@ CVE-2026-84445
CVE-2026-78667
CVE-2026-78669
CVE-2026-97031

# not fixed in this bundle: Go standard library go1.26.8, reported from the same
# apps/migrate_to_ocis/bin/rclone_linux_amd64 (rclone v1.75.1). Fixed in
# go1.26.10, which no rclone release is built with yet (v1.75.2 uses go1.26.9).
# GO-2026-6809 adds a crypto/x509 denylist of compromised intermediate CAs. rclone
# is only a client here, so the exposure is a man-in-the-middle presenting a chain
# through such an intermediate while an admin runs the files migration
# (`occ migrate:to-ocis:migrate:files`, the only step where rclone connects). With
# --insecure (-k) certificates are not verified at all, so the denylist would not
# help there either. Do not carry this into the next 11.0.x file once its bundle
# ships a migrate_to_ocis whose rclone is built with go >= 1.26.10.
CVE-2026-111943
2 changes: 1 addition & 1 deletion v24.04/Dockerfile.multiarch
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
FROM owncloud/base:24.04@sha256:02b669b388adaef2aa599a81557bb1d4412ee5861a3dc723890735c299969024
FROM owncloud/base:24.04@sha256:925f1156dd972e3b98e392e4fbd2b841f337cd8536fbad467bf360ee6670bff9

ARG TARBALL_URL

Expand Down
Loading