how does Docker not yet have a new, official PHP image ready, given such a big heads up? https://hub.docker.com/_/php Nuts this wasn't ready to flip on at :00 (or even earlier given the PoC exploit and even the official PHP fixes were out well before). Now we are 27 minutes past due.
Docker have been carrying a broken python build for months.
they are wanting people to pay for the hardened version.
Yes, it's embarrassing for Docker. Makes me wish I still had the classic LAMP stack.