They are not really problems. Your vendor should roll you new images when the software running in your container poses a security risk.

You always have to trust your vendor. And if you don't you can always roll your own docker images using the Dockerfile in their github repo.