diff --git a/README.md b/README.md
index 304b907..7a1ebce 100644
--- a/README.md
+++ b/README.md
@@ -5,11 +5,8 @@
 This image contains the latest version of MISP and the required dependencies. Image is intended as immutable, which means that it is not possible
 to update MISP from the user interface and instead, an admin should download a newer image.
 
-> [!IMPORTANT]  
-> This container is intended to be used with MISP v2.5. If you want to use older MISP v2.4, please use [`misp-2.4` branch](https://github.com/NUKIB/misp/tree/misp-2.4). 
-
-> [!IMPORTANT]  
-> This container is intended to be used with RHEL 9 base image. If you want to use older base image, please use [`el8` branch](https://github.com/NUKIB/misp/tree/el8).
+> [!CAUTION]  
+> To address PHP vulnerabilities (php2shell), pull the latest image or rebuild the image yourself. The patched PHP version is already available in the AlmaLinux repositories.
 
 ## Key features
 
diff --git a/bin/misp_install.sh b/bin/misp_install.sh
index 12e95af..bdd0734 100644
--- a/bin/misp_install.sh
+++ b/bin/misp_install.sh
@@ -29,7 +29,7 @@ sed -e 's/;assert.active = On/assert.active = Off/' -i ${PHP_INI}
 sed -e 's/expose_php = On/expose_php = Off/' -i ${PHP_INI}
 sed -e 's/session.sid_length = 26/session.sid_length = 32/' -i ${PHP_INI}
 sed -e 's/session.use_strict_mode = 0/session.use_strict_mode = 1/' -i ${PHP_INI}
-sed -e 's/;session.upload_progress.enabled = On/session.upload_progress.enabled = Off/' -i ${PHP_INI} # Possible workaround (not confirmed) for CVE-2026-109618 and CVE-2026-109619, but we don't need it anyway
+sed -e 's/;session.upload_progress.enabled = On/session.upload_progress.enabled = Off/' -i ${PHP_INI} # Partial workaround for CVE-2026-109618 and CVE-2026-109619, but we don't need `upload_progress` anyway so it is better to keep it disabled
 sed -e 's/pcre.jit=0/pcre.jit=1/' -i ${PHP_INI}
 sed -e 's/opcache.enable_cli=1/opcache.enable_cli=0/' -i /etc/php.d/10-opcache.ini
 # use igbinary serializer for apcu and sessions