<!DOCTYPE html>
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<p>Hallo Mapbender-Community,</p>
<p>(English version below)</p>
<p>die gestern erstellten Images wurden leider noch mit der
veralteten PHP-version 8.4.26 gebaut, vermutlich durch ein
Caching-Problem.</p>
<p>Die Images auf Dockerhub wurden heute nochmal aktualisiert, jetzt
mit der korrekten, gepatchten PHP-Version 8.4.27. Wer die Images
gestern oder heute Vormittag schon heruntergeladen hat, sollte
nochmals aktualisieren über (abhängig von der gewünschten Version)</p>
<p><font face="monospace">docker pull mapbender/mapbender</font></p>
<p><code class="">docker pull mapbender/<a class="moz-txt-link-freetext" href="mapbender:v4.2.8">mapbender:v4.2.8</a></code></p>
<p>Wer sich nicht sicher ist, welche Version installiert ist kann
die Prüfsumme verifizieren über</p>
<p><font face="monospace">docker images --digests</font></p>
<p>Die Prüfsumme der korrekten, neu hochgeladenen Version ist</p>
<p>v5.0.2:
<a class="moz-txt-link-freetext" href="sha256:7ca3d535a5cead3204a2d23e77f7a533c5d17fb3cd0a7ed81a665b9f470ea155">sha256:7ca3d535a5cead3204a2d23e77f7a533c5d17fb3cd0a7ed81a665b9f470ea155</a></p>
<p>v4.2.8:
<a class="moz-txt-link-freetext" href="sha256:ecfa336518eb16cbb968b345e980972898477f4a3e9750c74a82523913df7994">sha256:ecfa336518eb16cbb968b345e980972898477f4a3e9750c74a82523913df7994</a></p>
<p>Wir bitten, die Unannehmlichkeiten zu entschuldigen.</p>
<p><br>
</p>
<p>============= English ===============</p>
<p>Unfortunately, the images created yesterday were still built with
the vulnerable PHP version 8.4.26, presumably due to a caching
issue.</p>
<p>The images on Docker Hub were updated again today and now use the
correct, patched PHP version 8.4.27. Anyone who downloaded the
images yesterday or earlier today should update them again using
(depending on the desired version):</p>
<p><code class="">docker pull mapbender/mapbender</code></p>
<p><code class="">docker pull mapbender/<a class="moz-txt-link-freetext" href="mapbender:v4.2.8">mapbender:v4.2.8</a></code></p>
<p>If you are unsure which version is installed, you can verify the
checksum using:</p>
<pre class="code__71epnn" tabindex="0"><code class="">docker images --digests</code></pre>
<p>The checksums of the correct, newly uploaded versions are:</p>
<p>v5.0.2:
<a class="moz-txt-link-freetext" href="sha256:7ca3d535a5cead3204a2d23e77f7a533c5d17fb3cd0a7ed81a665b9f470ea155">sha256:7ca3d535a5cead3204a2d23e77f7a533c5d17fb3cd0a7ed81a665b9f470ea155</a></p>
<p>v4.2.8:
<a class="moz-txt-link-freetext" href="sha256:ecfa336518eb16cbb968b345e980972898477f4a3e9750c74a82523913df7994">sha256:ecfa336518eb16cbb968b345e980972898477f4a3e9750c74a82523913df7994</a></p>
<p>We apologize for the inconvenience.</p>
<p><br>
</p>
<p><br>
</p>
<div class="moz-cite-prefix">Am 22.10.26 um 07:10 schrieb Astrid
Emde (WhereGroup GmbH) via Mapbender_users:<br>
</div>
<blockquote type="cite"
cite="mid:5bda94ed0ec55a40155c41f2697243db@wheregroup.com">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<p>(English version below)</p>
<div id="message-content">
<div class="rightcol" role="region"
aria-labelledby="aria-label-messagebody">
<div id="messagebody">
<div id="message-htmlpart1" class="message-htmlpart">
<div id="message-htmlpart1" class="rcmBody">
<p
style="box-sizing: border-box; margin-top: 0px; margin-bottom: 16px; color: #1f2328; font-family: 'Mona Sans VF', -apple-system, BlinkMacSystemFont, 'Segoe UI', 'Noto Sans Backtick Fix', 'Noto Sans', Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji'; font-size: 16px; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; white-space: normal; background-color: #ffffff; text-decoration-thickness: initial; text-decoration-style: initial; text-decoration-color: initial;">Hallo
Mapbender-Community,</p>
<p
style="box-sizing: border-box; margin-top: 0px; margin-bottom: 16px; color: #1f2328; font-family: 'Mona Sans VF', -apple-system, BlinkMacSystemFont, 'Segoe UI', 'Noto Sans Backtick Fix', 'Noto Sans', Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji'; font-size: 16px; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; white-space: normal; background-color: #ffffff; text-decoration-thickness: initial; text-decoration-style: initial; text-decoration-color: initial;">als
Reaktion auf die angekündigten kritischen
PHP-Sicherheitsupdates haben wir aktualisierte
Mapbender-Docker-Releases veröffentlicht.</p>
<p
style="box-sizing: border-box; margin-top: 0px; margin-bottom: 16px; color: #1f2328; font-family: 'Mona Sans VF', -apple-system, BlinkMacSystemFont, 'Segoe UI', 'Noto Sans Backtick Fix', 'Noto Sans', Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji'; font-size: 16px; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; white-space: normal; background-color: #ffffff; text-decoration-thickness: initial; text-decoration-style: initial; text-decoration-color: initial;">Die
Release Notes nennen für beide unterstützten
Release-Linien PHP 8.4.27 als aktualisierte, gepatchte
PHP-Version:</p>
<ul
style="box-sizing: border-box; margin-top: 0px; margin-bottom: 16px; padding-left: 2em; color: #1f2328; font-family: 'Mona Sans VF', -apple-system, BlinkMacSystemFont, 'Segoe UI', 'Noto Sans Backtick Fix', 'Noto Sans', Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji'; font-size: 16px; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; white-space: normal; background-color: #ffffff; text-decoration-thickness: initial; text-decoration-style: initial; text-decoration-color: initial;">
<li style="box-sizing: border-box;">Mapbender 4.2.8</li>
<li
style="box-sizing: border-box; margin-top: 0.25em;">Mapbender
5.0.2</li>
</ul>
<p
style="box-sizing: border-box; margin-top: 0px; margin-bottom: 16px; color: #1f2328; font-family: 'Mona Sans VF', -apple-system, BlinkMacSystemFont, 'Segoe UI', 'Noto Sans Backtick Fix', 'Noto Sans', Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji'; font-size: 16px; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; white-space: normal; background-color: #ffffff; text-decoration-thickness: initial; text-decoration-style: initial; text-decoration-color: initial;">Die
neuen Versionen stehen im Mapbender-Starter-Repository
zur Verfügung [1][2]. Die zugehörigen Docker-Images
werden mit Versions-Tag bereitgestellt; die
verfügbaren Tags finden Sie auf Docker Hub [3].</p>
<div class="v1markdown-heading"
style="box-sizing: border-box; position: relative; color: #1f2328; font-family: 'Mona Sans VF', -apple-system, BlinkMacSystemFont, 'Segoe UI', 'Noto Sans Backtick Fix', 'Noto Sans', Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji'; font-size: 16px; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; white-space: normal; background-color: #ffffff; text-decoration-thickness: initial; text-decoration-style: initial; text-decoration-color: initial;">
<h2 class="v1heading-element"
style="box-sizing: border-box; margin-top: 24px; margin-bottom: 16px; font-size: 1.5em; font-weight: 600; line-height: 1.25; border-bottom: 0.8px solid rgba(209, 217, 224, 0.7); padding-bottom: 0.3em;">Was
ist zu tun?</h2>
</div>
<p
style="box-sizing: border-box; margin-top: 0px; margin-bottom: 16px; color: #1f2328; font-family: 'Mona Sans VF', -apple-system, BlinkMacSystemFont, 'Segoe UI', 'Noto Sans Backtick Fix', 'Noto Sans', Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji'; font-size: 16px; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; white-space: normal; background-color: #ffffff; text-decoration-thickness: initial; text-decoration-style: initial; text-decoration-color: initial;">Wenn
Sie eines der offiziellen Mapbender-Docker-Images
einsetzen, aktualisieren Sie auf das passende Image
Ihrer Release-Linie und erstellen Sie den Container
anschließend neu. Ein bereits laufender Container
übernimmt ein neues Image nicht automatisch.</p>
<p
style="box-sizing: border-box; margin-top: 0px; margin-bottom: 16px; color: #1f2328; font-family: 'Mona Sans VF', -apple-system, BlinkMacSystemFont, 'Segoe UI', 'Noto Sans Backtick Fix', 'Noto Sans', Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji'; font-size: 16px; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; white-space: normal; background-color: #ffffff; text-decoration-thickness: initial; text-decoration-style: initial; text-decoration-color: initial;">Prüfen
Sie nach dem Neustart die PHP-Version im Container und
testen Sie die für Ihre Installation relevanten
Abläufe.</p>
<p
style="box-sizing: border-box; margin-top: 0px; margin-bottom: 16px; color: #1f2328; font-family: 'Mona Sans VF', -apple-system, BlinkMacSystemFont, 'Segoe UI', 'Noto Sans Backtick Fix', 'Noto Sans', Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji'; font-size: 16px; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; white-space: normal; background-color: #ffffff; text-decoration-thickness: initial; text-decoration-style: initial; text-decoration-color: initial;">Wichtig:
Diese Aktualisierung betrifft das im offiziellen
Mapbender-Docker-Image enthaltene PHP. Bei
Installationen, die PHP des Hostsystems oder ein
selbst gebautes Image verwenden, muss die PHP-Laufzeit
separat aktualisiert werden. Die hier genannten
Mapbender-Releases aktualisieren nicht automatisch
externe oder selbst verwaltete PHP-Installationen.</p>
<div class="v1markdown-heading"
style="box-sizing: border-box; position: relative; color: #1f2328; font-family: 'Mona Sans VF', -apple-system, BlinkMacSystemFont, 'Segoe UI', 'Noto Sans Backtick Fix', 'Noto Sans', Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji'; font-size: 16px; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; white-space: normal; background-color: #ffffff; text-decoration-thickness: initial; text-decoration-style: initial; text-decoration-color: initial;">
<h2 class="v1heading-element"
style="box-sizing: border-box; margin-top: 24px; margin-bottom: 16px; font-size: 1.5em; font-weight: 600; line-height: 1.25; border-bottom: 0.8px solid rgba(209, 217, 224, 0.7); padding-bottom: 0.3em;">Zur
Sicherheitsmeldung</h2>
</div>
<p
style="box-sizing: border-box; margin-top: 0px; margin-bottom: 16px; color: #1f2328; font-family: 'Mona Sans VF', -apple-system, BlinkMacSystemFont, 'Segoe UI', 'Noto Sans Backtick Fix', 'Noto Sans', Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji'; font-size: 16px; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; white-space: normal; background-color: #ffffff; text-decoration-thickness: initial; text-decoration-style: initial; text-decoration-color: initial;">Die
PHP-Vorabankündigung nannte zwei kritische
Schwachstellen mit CVSS v4.0 9.2 und kündigte das
Sicherheitsrelease für den 21. Oktober 2026 an [4].
Die Mapbender-Release Notes bestätigen PHP 8.4.27 als
gepatchte Version. Sie enthalten selbst keine
CVE-Nummern oder technischen Details zu den
Schwachstellen; deshalb ordnen wir den Releases keine
weitergehenden technischen Aussagen zu.</p>
<p
style="box-sizing: border-box; margin-top: 0px; margin-bottom: 16px; color: #1f2328; font-family: 'Mona Sans VF', -apple-system, BlinkMacSystemFont, 'Segoe UI', 'Noto Sans Backtick Fix', 'Noto Sans', Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji'; font-size: 16px; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; white-space: normal; background-color: #ffffff; text-decoration-thickness: initial; text-decoration-style: initial; text-decoration-color: initial;">Vielen
Dank an alle, die die Aktualisierung zeitnah
bereitstellen und testen.</p>
<p
style="box-sizing: border-box; margin-top: 0px; margin-bottom: 16px; color: #1f2328; font-family: 'Mona Sans VF', -apple-system, BlinkMacSystemFont, 'Segoe UI', 'Noto Sans Backtick Fix', 'Noto Sans', Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji'; font-size: 16px; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; white-space: normal; background-color: #ffffff; text-decoration-thickness: initial; text-decoration-style: initial; text-decoration-color: initial;">Das
Mapbender-Team</p>
<p
style="box-sizing: border-box; margin-top: 0px; margin-bottom: 16px; color: #1f2328; font-family: 'Mona Sans VF', -apple-system, BlinkMacSystemFont, 'Segoe UI', 'Noto Sans Backtick Fix', 'Noto Sans', Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji'; font-size: 16px; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; white-space: normal; background-color: #ffffff; text-decoration-thickness: initial; text-decoration-style: initial; text-decoration-color: initial;">=============
English ===============</p>
<p
style="box-sizing: border-box; margin-top: 0px; margin-bottom: 16px; color: #1f2328; font-family: 'Mona Sans VF', -apple-system, BlinkMacSystemFont, 'Segoe UI', 'Noto Sans Backtick Fix', 'Noto Sans', Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji'; font-size: 16px; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; white-space: normal; background-color: #ffffff; text-decoration-thickness: initial; text-decoration-style: initial; text-decoration-color: initial;">Mapbender
Docker images updated with patched PHP</p>
<p
style="box-sizing: border-box; margin-top: 0px; margin-bottom: 16px; color: #1f2328; font-family: 'Mona Sans VF', -apple-system, BlinkMacSystemFont, 'Segoe UI', 'Noto Sans Backtick Fix', 'Noto Sans', Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji'; font-size: 16px; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; white-space: normal; background-color: #ffffff; text-decoration-thickness: initial; text-decoration-style: initial; text-decoration-color: initial;">Hello
Mapbender community,</p>
<p
style="box-sizing: border-box; margin-top: 0px; margin-bottom: 16px; color: #1f2328; font-family: 'Mona Sans VF', -apple-system, BlinkMacSystemFont, 'Segoe UI', 'Noto Sans Backtick Fix', 'Noto Sans', Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji'; font-size: 16px; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; white-space: normal; background-color: #ffffff; text-decoration-thickness: initial; text-decoration-style: initial; text-decoration-color: initial;">In
response to the announced critical PHP security
updates, we have published updated Mapbender Docker
releases.</p>
<p
style="box-sizing: border-box; margin-top: 0px; margin-bottom: 16px; color: #1f2328; font-family: 'Mona Sans VF', -apple-system, BlinkMacSystemFont, 'Segoe UI', 'Noto Sans Backtick Fix', 'Noto Sans', Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji'; font-size: 16px; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; white-space: normal; background-color: #ffffff; text-decoration-thickness: initial; text-decoration-style: initial; text-decoration-color: initial;">The
release notes specify PHP 8.4.27 as the updated,
patched PHP version for both supported release lines:</p>
<ul
style="box-sizing: border-box; margin-top: 0px; margin-bottom: 16px; padding-left: 2em; color: #1f2328; font-family: 'Mona Sans VF', -apple-system, BlinkMacSystemFont, 'Segoe UI', 'Noto Sans Backtick Fix', 'Noto Sans', Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji'; font-size: 16px; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; white-space: normal; background-color: #ffffff; text-decoration-thickness: initial; text-decoration-style: initial; text-decoration-color: initial;">
<li style="box-sizing: border-box;">Mapbender 4.2.8</li>
<li
style="box-sizing: border-box; margin-top: 0.25em;">Mapbender
5.0.2</li>
</ul>
<p
style="box-sizing: border-box; margin-top: 0px; margin-bottom: 16px; color: #1f2328; font-family: 'Mona Sans VF', -apple-system, BlinkMacSystemFont, 'Segoe UI', 'Noto Sans Backtick Fix', 'Noto Sans', Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji'; font-size: 16px; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; white-space: normal; background-color: #ffffff; text-decoration-thickness: initial; text-decoration-style: initial; text-decoration-color: initial;">The
new versions are available in the Mapbender Starter
repository [1][2]. The corresponding Docker images are
published with version tags; available tags are listed
on Docker Hub [3].</p>
<div class="v1markdown-heading"
style="box-sizing: border-box; position: relative; color: #1f2328; font-family: 'Mona Sans VF', -apple-system, BlinkMacSystemFont, 'Segoe UI', 'Noto Sans Backtick Fix', 'Noto Sans', Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji'; font-size: 16px; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; white-space: normal; background-color: #ffffff; text-decoration-thickness: initial; text-decoration-style: initial; text-decoration-color: initial;">
<h2 class="v1heading-element"
style="box-sizing: border-box; margin-top: 24px; margin-bottom: 16px; font-size: 1.5em; font-weight: 600; line-height: 1.25; border-bottom: 0.8px solid rgba(209, 217, 224, 0.7); padding-bottom: 0.3em;">What
should you do?</h2>
</div>
<p
style="box-sizing: border-box; margin-top: 0px; margin-bottom: 16px; color: #1f2328; font-family: 'Mona Sans VF', -apple-system, BlinkMacSystemFont, 'Segoe UI', 'Noto Sans Backtick Fix', 'Noto Sans', Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji'; font-size: 16px; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; white-space: normal; background-color: #ffffff; text-decoration-thickness: initial; text-decoration-style: initial; text-decoration-color: initial;">If
you use an official Mapbender Docker image, update to
the image matching your release line and recreate the
container. A running container does not automatically
switch to a newly published image.</p>
<p
style="box-sizing: border-box; margin-top: 0px; margin-bottom: 16px; color: #1f2328; font-family: 'Mona Sans VF', -apple-system, BlinkMacSystemFont, 'Segoe UI', 'Noto Sans Backtick Fix', 'Noto Sans', Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji'; font-size: 16px; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; white-space: normal; background-color: #ffffff; text-decoration-thickness: initial; text-decoration-style: initial; text-decoration-color: initial;">After
restarting, check the PHP version inside the container
and test the workflows relevant to your installation.</p>
<p
style="box-sizing: border-box; margin-top: 0px; margin-bottom: 16px; color: #1f2328; font-family: 'Mona Sans VF', -apple-system, BlinkMacSystemFont, 'Segoe UI', 'Noto Sans Backtick Fix', 'Noto Sans', Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji'; font-size: 16px; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; white-space: normal; background-color: #ffffff; text-decoration-thickness: initial; text-decoration-style: initial; text-decoration-color: initial;">Important:
This update applies to the PHP version bundled in the
official Mapbender Docker image. Installations using
the host system's PHP or a custom-built image need to
update their PHP runtime separately. The Mapbender
releases listed here do not automatically update
external or independently maintained PHP
installations.</p>
<div class="v1markdown-heading"
style="box-sizing: border-box; position: relative; color: #1f2328; font-family: 'Mona Sans VF', -apple-system, BlinkMacSystemFont, 'Segoe UI', 'Noto Sans Backtick Fix', 'Noto Sans', Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji'; font-size: 16px; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; white-space: normal; background-color: #ffffff; text-decoration-thickness: initial; text-decoration-style: initial; text-decoration-color: initial;">
<h2 class="v1heading-element"
style="box-sizing: border-box; margin-top: 24px; margin-bottom: 16px; font-size: 1.5em; font-weight: 600; line-height: 1.25; border-bottom: 0.8px solid rgba(209, 217, 224, 0.7); padding-bottom: 0.3em;">About
the security announcement</h2>
</div>
<p
style="box-sizing: border-box; margin-top: 0px; margin-bottom: 16px; color: #1f2328; font-family: 'Mona Sans VF', -apple-system, BlinkMacSystemFont, 'Segoe UI', 'Noto Sans Backtick Fix', 'Noto Sans', Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji'; font-size: 16px; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; white-space: normal; background-color: #ffffff; text-decoration-thickness: initial; text-decoration-style: initial; text-decoration-color: initial;">The
PHP advance announcement described two critical
vulnerabilities, each rated CVSS v4.0 9.2, and
scheduled the security release for 21 October 2026
[4]. The Mapbender release notes confirm PHP 8.4.27 as
the patched version. They do not provide CVE
identifiers or technical details of the
vulnerabilities, so we are not making further
technical claims about them here.</p>
<p
style="box-sizing: border-box; margin-top: 0px; margin-bottom: 16px; color: #1f2328; font-family: 'Mona Sans VF', -apple-system, BlinkMacSystemFont, 'Segoe UI', 'Noto Sans Backtick Fix', 'Noto Sans', Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji'; font-size: 16px; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; white-space: normal; background-color: #ffffff; text-decoration-thickness: initial; text-decoration-style: initial; text-decoration-color: initial;">Thank
you to everyone deploying and testing the update
promptly.</p>
<p
style="box-sizing: border-box; margin-top: 0px; margin-bottom: 16px; color: #1f2328; font-family: 'Mona Sans VF', -apple-system, BlinkMacSystemFont, 'Segoe UI', 'Noto Sans Backtick Fix', 'Noto Sans', Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji'; font-size: 16px; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; white-space: normal; background-color: #ffffff; text-decoration-thickness: initial; text-decoration-style: initial; text-decoration-color: initial;">The
Mapbender Team</p>
<p
style="box-sizing: border-box; margin-top: 0px; margin-bottom: 16px; color: #1f2328; font-family: 'Mona Sans VF', -apple-system, BlinkMacSystemFont, 'Segoe UI', 'Noto Sans Backtick Fix', 'Noto Sans', Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji'; font-size: 16px; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; white-space: normal; background-color: #ffffff; text-decoration-thickness: initial; text-decoration-style: initial; text-decoration-color: initial;">[1]
Mapbender 4.2.8 release notes: <a
class="v1moz-txt-link-freetext moz-txt-link-freetext"
style="box-sizing: border-box; background-color: rgba(0, 0, 0, 0); color: #0969da; text-decoration: underline; text-underline-offset: 0.2rem;"
href="https://github.com/mapbender/mapbender-starter/releases/tag/v4.2.8"
target="_blank" rel="noopener noreferrer"
moz-do-not-send="true">https://github.com/mapbender/mapbender-starter/releases/tag/v4.2.8</a></p>
<p
style="box-sizing: border-box; margin-top: 0px; margin-bottom: 16px; color: #1f2328; font-family: 'Mona Sans VF', -apple-system, BlinkMacSystemFont, 'Segoe UI', 'Noto Sans Backtick Fix', 'Noto Sans', Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji'; font-size: 16px; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; white-space: normal; background-color: #ffffff; text-decoration-thickness: initial; text-decoration-style: initial; text-decoration-color: initial;">[2]
Mapbender 5.0.2 release notes: <a
class="v1moz-txt-link-freetext moz-txt-link-freetext"
style="box-sizing: border-box; background-color: rgba(0, 0, 0, 0); color: #0969da; text-decoration: underline; text-underline-offset: 0.2rem;"
href="https://github.com/mapbender/mapbender-starter/releases/tag/v5.0.2"
target="_blank" rel="noopener noreferrer"
moz-do-not-send="true">https://github.com/mapbender/mapbender-starter/releases/tag/v5.0.2</a></p>
<p
style="box-sizing: border-box; margin-top: 0px; margin-bottom: 16px; color: #1f2328; font-family: 'Mona Sans VF', -apple-system, BlinkMacSystemFont, 'Segoe UI', 'Noto Sans Backtick Fix', 'Noto Sans', Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji'; font-size: 16px; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; white-space: normal; background-color: #ffffff; text-decoration-thickness: initial; text-decoration-style: initial; text-decoration-color: initial;">[3]
Mapbender Docker Hub tags: <a
class="v1moz-txt-link-freetext moz-txt-link-freetext"
style="box-sizing: border-box; background-color: rgba(0, 0, 0, 0); color: #0969da; text-decoration: underline; text-underline-offset: 0.2rem;"
href="https://hub.docker.com/r/mapbender/mapbender/tags" target="_blank"
rel="noopener noreferrer" moz-do-not-send="true">https://hub.docker.com/r/mapbender/mapbender/tags</a></p>
<p
style="box-sizing: border-box; margin-top: 0px; margin-bottom: 0px !important; color: #1f2328; font-family: 'Mona Sans VF', -apple-system, BlinkMacSystemFont, 'Segoe UI', 'Noto Sans Backtick Fix', 'Noto Sans', Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji'; font-size: 16px; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; white-space: normal; background-color: #ffffff; text-decoration-thickness: initial; text-decoration-style: initial; text-decoration-color: initial;">[4]
PHP security release advance announcement: <a
class="v1moz-txt-link-freetext moz-txt-link-freetext"
style="box-sizing: border-box; background-color: rgba(0, 0, 0, 0); color: #0969da; text-decoration: underline; text-underline-offset: 0.2rem;"
href="https://news-web.php.net/php.announce/509"
target="_blank" rel="noopener noreferrer"
moz-do-not-send="true">https://news-web.php.net/php.announce/509</a></p>
<p><br>
</p>
</div>
</div>
</div>
</div>
</div>
<div id="signature">
<div><br>
<table style="direction: ltr; color: #000000;">
<tbody>
<tr>
<td
style="padding-right: 4.5pt; vertical-align: top; width: 192px; height: 37px;">
<p
style="margin: 0; font-family: 'Ubuntu Medium', Ubuntu, sans-serif; font-size: 9pt; color: black; font-weight: 500;">Mit
freundlichen Grüßen</p>
<p
style="margin: 0; font-family: 'Ubuntu Medium', Ubuntu, sans-serif; font-size: 9pt; color: black; font-weight: 500;"> </p>
<p
style="margin: 0; font-family: 'Ubuntu Medium', Ubuntu, sans-serif; font-size: 9pt; color: black; font-weight: 500;">Astrid
Emde</p>
<p
style="margin: 0; font-family: 'Ubuntu Light', Ubuntu, sans-serif; font-weight: 300; font-size: 8pt; color: black;">GIS-Consultant</p>
</td>
</tr>
<tr>
<td
style="width: 192px; height: 39px; text-align: left; padding: 0; margin: 0; overflow: visible;">
<div style="width: 140%; height: 140%;"><img
src="cid:part1.XqTlZgLt.3IzP02kb@wheregroup.com"
width="300" height="60" class=""></div>
</td>
</tr>
<tr>
<td
style="padding: 4.5pt 4.5pt 4.5pt 0; width: 192px; height: 65px;">
<p
style="margin: 0; font-family: 'Ubuntu Light', Ubuntu, sans-serif; font-size: 8pt; color: #747577;"><br>
WhereGroup GmbH<br>
Eifelstraße 7<br>
53119 Bonn<br>
Germany<br>
<br>
Tel: +49 (0)228 / 90 90 38 - 22<br>
<br>
<a class="moz-txt-link-abbreviated" href="mailto:astrid.emde@wheregroup.com">astrid.emde@wheregroup.com</a><br>
<a class="moz-txt-link-abbreviated" href="http://www.wheregroup.com">www.wheregroup.com</a><br>
<br>
Geschäftsführer:<br>
Olaf Knopp, Peter Stamm<br>
Amtsgericht Bonn, HRB 9885</p>
</td>
</tr>
</tbody>
</table>
</div>
</div>
<br>
<fieldset class="moz-mime-attachment-header"></fieldset>
<pre wrap="" class="moz-quote-pre">_______________________________________________
Mapbender_users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Mapbender_users@lists.osgeo.org">Mapbender_users@lists.osgeo.org</a>
<a class="moz-txt-link-freetext" href="https://lists.osgeo.org/mailman/listinfo/mapbender_users">https://lists.osgeo.org/mailman/listinfo/mapbender_users</a>
</pre>
</blockquote>
<div class="moz-signature">-- <br>
<div>
<table style="direction: ltr; color: rgb(0, 0, 0);">
<tbody>
<tr>
<td
style="padding-right: 4.5pt; vertical-align: top; width: 200px; height: 37px;">
<p
style="margin: 0; font-family: 'Ubuntu Medium', Ubuntu, sans-serif; font-size: 9pt; color: black; font-weight: 500;">
Thorsten Hack </p>
<p
style="margin: 0; font-family: 'Ubuntu Light', Ubuntu, sans-serif; font-weight: 300; font-size: 8pt; color: black;">
Software-Entwicklung </p>
<br>
</td>
</tr>
<tr>
<td
style="width:192px; height:39px; text-align:left; padding:0; margin:0; overflow:visible;">
<img alt="WhereGroup Logo"
src="cid:part2.yUdaWvcf.W5MdwsOn@wheregroup.com"
style="max-width: 100%; height: auto; display: block;">
</td>
</tr>
<tr>
<td
style="padding: 4.5pt 4.5pt 4.5pt 0; width: 192px; height: 65px;">
<p
style="margin: 0; font-family: 'Ubuntu Light', Ubuntu, sans-serif; font-size: 8pt; color: #747577;">
<br>
WhereGroup GmbH<br>
Schwimmbadstr. 2<br>
79100 Freiburg<br>
Germany<br>
<br>
+49 761 519 102 67<br>
<br>
<a class="moz-txt-link-abbreviated" href="mailto:thorsten.hack@wheregroup.com">thorsten.hack@wheregroup.com</a><br>
<a class="moz-txt-link-abbreviated" href="http://www.wheregroup.com">www.wheregroup.com</a><br>
<br>
Geschäftsführer:<br>
Olaf Knopp, Peter Stamm<br>
Amtsgericht Bonn, HRB 9885 <br>
</p>
</td>
</tr>
</tbody>
</table>
</div>
</div>
</body>
</html>