They even committed the fixed version to the repo, but it seems no images where pushed: https://github.com/docker-library/php/commit/e3eaff845f7a9f7...
Edit: Seems like GitHub has issues with merging PRs: https://github.com/docker-library/official-images/pull/22541
It went a few seconds ago. I was also surprised they didn't have advance access but thinking about it, with the whole thing being a public Github pipeline, it's unclear how they could have achieved it whilst simultaneously keeping the patch private. Is there precedent?
Ugh these comments on GitHub. Don't people know when it's best to just post nothing? "516 hidden items"