How do I force docker-compose to update an image?

Given the recent exploits of php (e.g. [MS-ISAC ADVISORY NUMBER: 2018-101](https://www.cisecurity.org/advisory/multiple-vulnerabilities-in-php-could-allow-for-arbitrary-code-execution_2018-101/)), I want to update my [docker-compose wordpress](https://docs.docker.com/compose/wordpress/#define-the-project). 

I tried:
`docker-compose down && docker-compose build --pull && docker-compose up -d`

When I check the version of php though, it lists `7.2.9` rather than `7.2.10` 
I check it by:

1. `docker exec -it wordpress_wordpress_1 /bin/bash`
2. `php -v`

I believe that it should list `7.2.10` because when i go to [wordpress on docker hub](https://hub.docker.com/_/wordpress/) and follow the link for [latest](https://github.com/docker-library/wordpress/blob/cb50cbaabba8eea67ea6a1f7702a7a1e238f10b9/php7.2/apache/Dockerfile), I see that it lists `php:7.2-apache`, and when I check [php on docker hub](https://hub.docker.com/_/php/) for `7.2-apache`, the [Dockerfile](https://github.com/docker-library/php/blob/d97098c8c6af46ae1211e65ff052278ab39ba45c/7.2/stretch/apache/Dockerfile) lists `7.2.10` (see: [L116](https://github.com/docker-library/php/blob/d97098c8c6af46ae1211e65ff052278ab39ba45c/7.2/stretch/apache/Dockerfile#L116))