[greggsy]

I see this is a packaging service with greater traceability and velocity than the rando images on docker hub.

I believe that they will always supply the bleeding edge stable release, but it will always be your responsibility to monitor and manage issues like CVEs, rather than expecting them to do it for you.