From 5d44bb1934a57b2a28efdb9e80e0db451a3febe4 Mon Sep 17 00:00:00 2001
From: Jules Nsenda <jules@paystack.com>
Date: Thu, 22 Oct 2026 08:24:28 +0200
Subject: [PATCH] chore(dev): pin PHP 8.4.27 to patch php2shell

CVE-2026-109618 / CVE-2026-109619 are unauthenticated RCEs in PHP before
8.4.27, and this env runs Apache mod_php, the highest-risk SAPI. Pinning
the patch tag stops a stale cached php:8.4-apache layer from being reused.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
---
 dev/Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/dev/Dockerfile b/dev/Dockerfile
index 2c76eec..37b51ba 100644
--- a/dev/Dockerfile
+++ b/dev/Dockerfile
@@ -1,4 +1,4 @@
-FROM php:8.4-apache
+FROM php:8.4.27-apache
 
 # Install system dependencies
 RUN apt-get update && apt-get install -y \