search

docker-library / mysql

Docker Official Image packaging for MySQL Community Server
https://dev.mysql.com/
GNU General Public License v2.0
2.46k stars 2.19k forks source link

Insecure 8.0.31 #1080

Open nroose opened 1 month ago

nroose commented 1 month ago

Hey, any chance you will update the 8.0.31 image? I know it's not recent. but the default Google Cloud SQL mysql version is 8.0.31, so we like to use that docker image in our CI. And it has 2 critical vulnerabilities (CVE-2022-23806 and CVE-2023-37920). Just cheaper and easier if you do it than if I do it! Thanks for all you do anyway, even if you won't!

tianon commented 1 month ago

Sorry, but unfortunately 8.0.39 is the only image we currently support / will update, and even then only until 8.0.40+ is released. :see_no_evil:

That being said, the final Dockerfile for that version is still available in our commit history: https://github.com/docker-library/mysql/blob/e0d43b2a29867c5b7d5c01a8fea30a086861df2b/8.0/Dockerfile.oracle

So you could build your own updated image from that via something like docker buildx build 'https://github.com/docker-library/mysql.git#e0d43b2a29867c5b7d5c01a8fea30a086861df2b:8.0' -f Dockerfile.oracle (which may or may not work depending on the continued availability of the artifacts it references).