docker-library / mysql

Docker Official Image packaging for MySQL Community Server
https://dev.mysql.com/
GNU General Public License v2.0
2.42k stars 2.18k forks source link

Openssl CVE vulnerability fix #1031

Open ghost opened 4 months ago

ghost commented 4 months ago

I used snyk to scan and found out that there are many vulnerabilities in the latest image, mainly about openssl. How should I upgrade to fix this problem? I plan to directly use the source code package to compile and build to upgrade. Can I directly reuse the Dockerfile in the source code warehouse here? Is it okay to use my own source code to install openssl instead of dnf installation?