Use PHP images patched for CVE-2026-109618/109619 (PHP2Shell)

PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 (21 Oct 2026) fix two critical,
actively exploited RCE bugs in the runtime. Templates pinned to 8.1 (EOL,
no fix) move to 8.4.27; templates on 8.3 move to 8.3.36.
https://www.php.net/archive/2026.php

Author: William

src/themes/docker/docker/Dockerfile

@@ -1,4 +1,4 @@
-FROM php:8.3-apache
+FROM php:8.3.36-apache
 
 COPY 000-default.conf /etc/apache2/sites-available/000-default.conf
 

src/themes/mvc/docker/docker/Dockerfile

@@ -1,4 +1,4 @@
-FROM php:8.1-apache
+FROM php:8.4.27-apache
 
 COPY 000-default.conf /etc/apache2/sites-available/000-default.conf