The version isn't static - when Ubuntu release a new package Redis will be updated in the PHP container. If we release our own package for Redis then this will be on the release notes.
The PHP containers are not Docker but the principle is the same, we can potentially expose sysctl variables to the master organisation. However in this case I don't see any benefit in sysctl tuning.