Security & supply chainPHP2Shell and the eMudhra certificates have the same fix: rebuild the image
A pair of critical PHP engine flaws and eight eMudhra intermediate certificates with computable private keys landed in the same week, and for container users both are fixed the same way: rebuild on a patched base, then redeploy. An image carries its own trust store, so it keeps trusting bad certificates until someone rebuilds it.