diff --git a/Dockerfile-legacy b/Dockerfile-legacy
index 9530a2fe632..7dbdda4c3eb 100644
--- a/Dockerfile-legacy
+++ b/Dockerfile-legacy
@@ -80,7 +80,7 @@ RUN npm run build
 # Debian's ImageMagick is built without JPEG XL, so we build our own (ADR-101-01).
 # Same build as ./Dockerfile, but imagick is compiled for the non-thread-safe PHP of PHP-FPM.
 # Bump IMAGEMAGICK_VERSION/IMAGEMAGICK_SHA256 on ImageMagick security releases, in both Dockerfiles.
-FROM php:8.5-fpm-trixie@sha256:e343d72629421d3c21064ec8d94e0c121790b0e3b2a9f594e8f366123e45ecaa AS imagemagick
+FROM php:8.5-fpm-trixie@sha256:f49965c6e6a237eb3b27a6fc565e167839dc8abc65ee0652af0078f6ecdf4bbd AS imagemagick
 
 ARG IMAGEMAGICK_VERSION=7.1.2-32
 ARG IMAGEMAGICK_SHA256=940e349f0ef394e658fd57400b83d1d7a81b954f6e7bdbfbfad31b2718c10add
@@ -141,7 +141,7 @@ RUN curl -fsSL -o /build/imagick.tgz "https://pecl.php.net/get/imagick-${IMAGICK
 # Stage 4: Production nginx + PHP-FPM Image
 # ============================================================================
 # Official PHP image: Sury does not publish every PHP patch release for arm64.
-FROM php:8.5-fpm-trixie@sha256:e343d72629421d3c21064ec8d94e0c121790b0e3b2a9f594e8f366123e45ecaa AS base
+FROM php:8.5-fpm-trixie@sha256:f49965c6e6a237eb3b27a6fc565e167839dc8abc65ee0652af0078f6ecdf4bbd AS base
 
 LABEL maintainer="lycheeorg"
 LABEL org.opencontainers.image.title="Lychee"