From ef2c7ea8b3505f79b5cd8502a219fa0e6fecc1cd Mon Sep 17 00:00:00 2001
From: Paul Payne <paul@payne.io>
Date: Fri, 23 Oct 2026 13:47:15 +0000
Subject: [PATCH] Bump 5 PHP apps to upstream images patched for PHP2Shell
 (CVE-2026-109618, CVE-2026-109619)

- nextcloud: 34.0.0 -> 34.0.5 (PHP 8.5.12)
- mediawiki: 1.43.1 -> 1.43.11 (PHP 8.3.36)
- firefly-iii: 6.6.3 -> 6.7.7 (PHP 8.5.12)
- bookstack: 26.05.1 -> 26.09.2 (PHP patched)
- limesurvey: 6.17.5 -> 6.17.18 (PHP 8.4.27)
---
 bookstack/versions/26/deployment.yaml  | 2 +-
 bookstack/versions/26/manifest.yaml    | 2 +-
 firefly-iii/versions/6/deployment.yaml | 2 +-
 firefly-iii/versions/6/manifest.yaml   | 2 +-
 limesurvey/versions/6/deployment.yaml  | 2 +-
 limesurvey/versions/6/manifest.yaml    | 2 +-
 mediawiki/versions/1/deployment.yaml   | 2 +-
 mediawiki/versions/1/manifest.yaml     | 2 +-
 nextcloud/versions/34/deployment.yaml  | 2 +-
 nextcloud/versions/34/manifest.yaml    | 2 +-
 10 files changed, 10 insertions(+), 10 deletions(-)

diff --git a/bookstack/versions/26/deployment.yaml b/bookstack/versions/26/deployment.yaml
index 1c4d178..9f7cf39 100644
--- a/bookstack/versions/26/deployment.yaml
+++ b/bookstack/versions/26/deployment.yaml
@@ -22,7 +22,7 @@ spec:
           type: RuntimeDefault
       containers:
         - name: bookstack
-          image: lscr.io/linuxserver/bookstack:26.05.1
+          image: lscr.io/linuxserver/bookstack:26.09.2
           ports:
             - name: http
               containerPort: 80
diff --git a/bookstack/versions/26/manifest.yaml b/bookstack/versions/26/manifest.yaml
index 5cfb994..9267f26 100644
--- a/bookstack/versions/26/manifest.yaml
+++ b/bookstack/versions/26/manifest.yaml
@@ -1,4 +1,4 @@
-version: 26.05.1-3
+version: 26.09.2-1
 requires:
 - name: mysql
 - name: smtp
diff --git a/firefly-iii/versions/6/deployment.yaml b/firefly-iii/versions/6/deployment.yaml
index 4c2865c..a746cb0 100644
--- a/firefly-iii/versions/6/deployment.yaml
+++ b/firefly-iii/versions/6/deployment.yaml
@@ -20,7 +20,7 @@ spec:
           type: RuntimeDefault
       containers:
         - name: firefly-iii
-          image: fireflyiii/core:version-6.6.3
+          image: fireflyiii/core:version-6.7.7
           ports:
             - name: http
               containerPort: 8080
diff --git a/firefly-iii/versions/6/manifest.yaml b/firefly-iii/versions/6/manifest.yaml
index c030951..afa803a 100644
--- a/firefly-iii/versions/6/manifest.yaml
+++ b/firefly-iii/versions/6/manifest.yaml
@@ -1,4 +1,4 @@
-version: 6.6.3-2
+version: 6.7.7-1
 requires:
 - name: postgres
 defaultConfig:
diff --git a/limesurvey/versions/6/deployment.yaml b/limesurvey/versions/6/deployment.yaml
index cc96d58..7d6dd78 100644
--- a/limesurvey/versions/6/deployment.yaml
+++ b/limesurvey/versions/6/deployment.yaml
@@ -24,7 +24,7 @@ spec:
           type: RuntimeDefault
       containers:
         - name: limesurvey
-          image: martialblog/limesurvey:6.17.5-260527-apache
+          image: martialblog/limesurvey:6.17.18-261021-apache
           ports:
             - name: http
               containerPort: 8080
diff --git a/limesurvey/versions/6/manifest.yaml b/limesurvey/versions/6/manifest.yaml
index f9d8f97..6b17d80 100644
--- a/limesurvey/versions/6/manifest.yaml
+++ b/limesurvey/versions/6/manifest.yaml
@@ -1,4 +1,4 @@
-version: 6.17.5-2
+version: 6.17.18-1
 requires:
 - name: postgres
 - name: smtp
diff --git a/mediawiki/versions/1/deployment.yaml b/mediawiki/versions/1/deployment.yaml
index 1548fdf..8dcd53e 100644
--- a/mediawiki/versions/1/deployment.yaml
+++ b/mediawiki/versions/1/deployment.yaml
@@ -24,7 +24,7 @@ spec:
           type: RuntimeDefault
       containers:
         - name: mediawiki
-          image: mediawiki:1.43.1
+          image: mediawiki:1.43.11
           ports:
             - name: http
               containerPort: 80
diff --git a/mediawiki/versions/1/manifest.yaml b/mediawiki/versions/1/manifest.yaml
index 3b0a667..48c0638 100644
--- a/mediawiki/versions/1/manifest.yaml
+++ b/mediawiki/versions/1/manifest.yaml
@@ -1,4 +1,4 @@
-version: 1.43.1-2
+version: 1.43.11-1
 requires:
 - name: mysql
 - name: smtp
diff --git a/nextcloud/versions/34/deployment.yaml b/nextcloud/versions/34/deployment.yaml
index 5856a78..8abe566 100644
--- a/nextcloud/versions/34/deployment.yaml
+++ b/nextcloud/versions/34/deployment.yaml
@@ -22,7 +22,7 @@ spec:
           type: RuntimeDefault
       containers:
         - name: nextcloud
-          image: nextcloud:34.0.0-apache
+          image: nextcloud:34.0.5-apache
           ports:
             - name: http
               containerPort: 80
diff --git a/nextcloud/versions/34/manifest.yaml b/nextcloud/versions/34/manifest.yaml
index d872000..a5bc2bc 100644
--- a/nextcloud/versions/34/manifest.yaml
+++ b/nextcloud/versions/34/manifest.yaml
@@ -1,4 +1,4 @@
-version: 34.0.0-2
+version: 34.0.5-1
 requires:
 - name: postgres
 - name: redis