CuraDevOps

tag: Base-Images · 2 items

Plan PHP2Shell Critical CVEs Impact Docker Customers Using PHP Images
2026-10-23 · Docker Blog · source ↗ #php2shell#docker-security#base-images
  • Platform/SRE — Skip
  • CI/CD — Plan: Two critical PHP CVEs affect Docker images built on PHP; audit pipelines for PHP-based container images and update base images to patched PHP versions. Neither CVE is KEV-listed and EPSS scores are low (0.12/0.06), so no emergency, but schedule the base-image refresh this sprint.
  • Leader — Skip
  • Signals: CVE-2026-109618 — CISA KEV: not listed, EPSS 0.12, reported by 2 collected sources · CVE-2026-109619 — CISA KEV: not listed, EPSS 0.06, reported by 2 collected sources
Act archived Minimus Registry Shutting Down Oct 22 — Migrate to Docker Hardened Images
2026-08-26 · Docker Blog · source ↗ #base-images#registry-migration#docker
  • Platform/SRE — Act: The Minimus registry goes offline October 22, 2026; audit all Dockerfiles, Helm charts, and Kubernetes manifests for Minimus base image references and complete migration to Docker Hardened Images before that date to prevent broken image pulls in production.
  • CI/CD — Act: Any pipeline pulling from the Minimus registry will break after October 22, 2026; inventory all build Dockerfiles and CI base-image references now and migrate to Docker Hardened Images using the provided migration path and Docker’s free migration assistance before the deadline.
  • Leader — Skip