Back
Docker images security update and tag versioning changes
22 Oct 2026, 16:41
We would like to inform you about an important update to the Bacularis Docker images.
PHP update
Following the discovery of two critical security vulnerabilities in PHP, we have updated the Bacularis Docker images on Docker Hub. These vulnerabilities are described on the official PHP website:
https://www.php.net/archive/2026.php#2026-10-21-5
We have updated the Bacularis container images so that users running Bacularis in Docker can benefit from a patched version of PHP.
The Bacularis version itself has not changed (7.0.0), as this update affects the container environment rather than Bacularis. Older Bacularis Docker images have not been rebuilt and still contain PHP versions affected by these vulnerabilities.
Users running Bacularis installed through other methods (binary packages, PHP Composer, or manual installation from source archives) should check whether an updated PHP version is available for their systems.
The official PHP versions containing the security fixes are:
- 8.5.12
- 8.4.27
- 8.3.36
- 8.2.35
We recommend that all users running older Bacularis Docker images update to the latest 7.0.0-1 images, which include a patched version of PHP.
New Docker image tags
Along with the updated images, we have introduced a new tagging scheme for Bacularis Docker images. The new tags include an additional -1 after the Bacularis version number:
bacularis/bacularis-api-dir:7.0.0-1-alpinebacularis/bacularis-api-dir:7.0.0-1-trixiebacularis/bacularis-api-fd:7.0.0-1-alpinebacularis/bacularis-api-fd:7.0.0-1-trixiebacularis/bacularis-api-sd:7.0.0-1-alpinebacularis/bacularis-api-sd:7.0.0-1-trixiebacularis/bacularis-standalone:7.0.0-1-alpinebacularis/bacularis-standalone:7.0.0-1-trixiebacularis/bacularis-web:7.0.0-1-alpinebacularis/bacularis-web:7.0.0-1-trixie
The additional number after the Bacularis version represents the Docker image revision. This allows us to release updates to the container environment without changing the Bacularis version itself.
This new tagging scheme will be used consistently for all future Bacularis releases. For example, upcoming versions can be expected to use tags such as 7.1.0-1, 7.2.0-1, and so on.
If your automation relies on Docker image tag patterns such as x.x.x-trixie or x.x.x-alpine, please make sure to update it to support the new patterns: x.x.x-Y-trixie and x.x.x-Y-alpine, where Y represents the Docker image revision.
