# Gepatchtes PHP-Basis-Image gegen CVE-2026-109618 / CVE-2026-109619.
# Aufruf ueber build.sh. BASE = offizielles Image (php:7.3-fpm-alpine, php:7.3-apache, php:7.4-*, php:8.0-*, php:8.1-*).
ARG BASE
FROM ${BASE} AS build
ARG JOBS
ARG RUN_TESTS=0
COPY patches/ /tmp/php-cve/patches/
COPY build-in-image.sh /tmp/php-cve/
RUN JOBS="${JOBS:-$(nproc)}" RUN_TESTS="$RUN_TESTS" sh /tmp/php-cve/build-in-image.sh

# Endimage: unveraendertes Basis-Image + neu gebaute Binaries, Module, Header.
FROM ${BASE}
COPY --from=build /out/ /
RUN set -eux; php -v; php -m > /dev/null; \
    php -r 'exit(ini_get("max_multipart_body_parts") === "-1" ? 0 : 1);'; \
    if command -v php-fpm > /dev/null; then php-fpm -t; fi; \
    if command -v apache2ctl > /dev/null; then apache2ctl -M 2> /dev/null | grep -q php; fi
LABEL de.appwerke.php-cve="CVE-2026-109618,CVE-2026-109619"
