They even committed the fixed version to the repo, but it seems no images where pushed: https://github.com/docker-library/php/commit/e3eaff845f7a9f7...
replyEdit: Seems like GitHub has issues with merging PRs: https://github.com/docker-library/official-images/pull/22541
Ugh these comments on GitHub. Don't people know when it's best to just post nothing? "516 hidden items"
replyHave you ever experienced a "Reply-all storm"?
replyIt went a few seconds ago. I was also surprised they didn't have advance access but thinking about it, with the whole thing being a public Github pipeline, it's unclear how they could have achieved it whilst simultaneously keeping the patch private. Is there precedent?
replydeleted
replythey have a long process with multiple build steps before the images reach the registry.
replyhttps://github.com/docker-library/faq#an-images-source-chang...
Images are there for docker now, but pecl has decided to have issues . ARGH
replyI have zero internal info, just guessing, but there's a PR from 5min ago asking to add someone as a reviewer for PHP images:
replyhttps://github.com/docker-library/official-images/pull/22544
Maybe the guy that has to click OK is asleep?
Yeah, I was very surprised to wake up just now and find docker still vulnerable.
replyAnd now, at 2hrs 55mins past the PHP release, the amd64 image is available. Although it appears that the servers hosting the image are getting hugged to death because I can't actually download it.
replyYepp, we're seeing the Debian images now for 8.4.27
replyOut now!
replyhttps://hub.docker.com/_/php/tags
EDIT: 25min later, nope.
That's placeholders for images, you can't actually pull them yet.
replyhttps://hub.docker.com/layers/library/php/8.5.12-fpm/images/...
Any eta, when they will be available?
replyNow they should be actually available and pullable! The only problem is that it took 3 hours with a huge security problem already exploited in the wild.
replyYep. That's a real issue. We took our applications offline until now.
replyThey are being backfilled now starting from the 8.0 images it looks like.
reply[dead]
reply