Docker: PHP2Shell and eMudhra certificates both require image rebuilds

Docker explained that containers carry their own trust store and PHP binary in image layers, so restarting a pod does not fix the PHP2Shell flaws (CVE-2026-109618 and CVE-2026-109619) or the compromised eMudhra intermediate certificates. The dhi.io/php image was rebuilt on patched PHP on October 22, with 16,567 builds run in 48 hours.

• PHP2Shell is a pair of critical PHP flaws allowing unauthenticated code execution
• PHP powers about 69% of websites with a known server-side language
• Eight eMudhra intermediate certificates had computable private keys
• DHI ran 16,567 package and image builds in 48 hours