PKG-165 CVEs in xtradb-cluster, haproxy and proxysql images (#1024)

percona · Aug 29, 2024 · 8088544 · 8088544
1 parent 8e0a3aa
commit 8088544
Show file tree

Hide file tree

Showing 3 changed files with 6 additions and 3 deletions.
diff --git a/percona-server-8.0/Dockerfile b/percona-server-8.0/Dockerfile
@@ -65,6 +65,7 @@ RUN set -ex; \
  glibc \
  libnghttp2 \
  openssh \
+ python3-setuptools-wheel \
  python3; \
  \
  dnf -y install \
@@ -86,7 +87,7 @@ RUN set -ex; \
  | xargs -rt -0 sed -Ei 's/^(bind-address|log|user)/#&/'; \
 # don't reverse lookup hostnames, they are usually another container
  echo '!includedir /etc/my.cnf.d' >> /etc/my.cnf; \
- printf '[mysqld]\nskip-host-cache\nskip-name-resolve\n' > /etc/my.cnf.d/docker.cnf; \
+ printf '[mysqld]\nhost_cache_size=0\nskip-name-resolve\n' > /etc/my.cnf.d/docker.cnf; \
 # TokuDB modifications
  /usr/bin/install -m 0664 -o mysql -g root /dev/null /etc/sysconfig/mysql; \
  echo "LD_PRELOAD=/usr/lib64/libjemalloc.so.1" >> /etc/sysconfig/mysql; \

diff --git a/percona-server-8.0/Dockerfile.aarch64 b/percona-server-8.0/Dockerfile.aarch64
@@ -62,6 +62,7 @@ RUN set -ex; \
  glibc \
  libnghttp2 \
  openssh \
+ python3-setuptools-wheel \
  python3; \
  \
  dnf -y install \
@@ -82,7 +83,8 @@ RUN set -ex; \
  | xargs -rt -0 sed -Ei 's/^(bind-address|log|user)/#&/'; \
 # don't reverse lookup hostnames, they are usually another container
  echo '!includedir /etc/my.cnf.d' >> /etc/my.cnf; \
- printf '[mysqld]\nskip-host-cache\nskip-name-resolve\n' > /etc/my.cnf.d/docker.cnf; \
+ printf '[mysqld]\nhost_cache_size=0\nskip-name-resolve\n' > /etc/my.cnf.d/docker.cnf; \
+
 # TokuDB modifications
  /usr/bin/install -m 0664 -o mysql -g root /dev/null /etc/sysconfig/mysql; \
  echo "LD_PRELOAD=/usr/lib64/libjemalloc.so.1" >> /etc/sysconfig/mysql; \

diff --git a/percona-xtradb-cluster-8.0/Dockerfile b/percona-xtradb-cluster-8.0/Dockerfile
@@ -137,7 +137,7 @@ RUN if [[ -n $DEBUG ]] ; then \
  percona-release disable pdpxc-8.0 ${PXC_REPO}; \
  curl -Lf -o /tmp/telnet.rpm https://downloads.percona.com/downloads/packaging/telnet-0.17-76.el8.x86_64.rpm; \
  curl -Lf -o /tmp/tcpdump.rpm https://downloads.percona.com/downloads/packaging/tcpdump-4.9.3-2.el8.x86_64.rpm; \
- curl -Lf -o /tmp/perf.rpm https://downloads.percona.com/downloads/packaging/perf-4.18.0-553.5.1.el8_10.x86_64.rpm; \
+ curl -Lf -o /tmp/perf.rpm https://downloads.percona.com/downloads/packaging/perf-4.18.0-553.16.1.el8_10.x86_64.rpm; \
  curl -Lf -o /tmp/strace.rpm https://downloads.percona.com/downloads/packaging/strace-5.7-3.el8.x86_64.rpm; \
  curl -Lf -o /tmp/percona-xtradb-cluster-debuginfo.rpm https://repo.percona.com/pxc-80/yum/${PXC_REPO}/8/RPMS/x86_64/percona-xtradb-cluster-debuginfo-${FULL_PERCONA_XTRADBCLUSTER_VERSION}.x86_64.rpm; \
  curl -Lf -o /tmp/percona-xtradb-cluster-server-debuginfo.rpm https://repo.percona.com/pxc-80/yum/${PXC_REPO}/8/RPMS/x86_64/percona-xtradb-cluster-server-debuginfo-${FULL_PERCONA_XTRADBCLUSTER_VERSION}.x86_64.rpm; \