MySQL CVE's affecting current versions of percona pxc images

MySQL & MariaDB Percona XtraDB Cluster 8.x
1

Hello,

According to oracle all the currently available pxc images are affected by CVE’s:

Oracle Critical Patch Update Advisory - January 2025

I was wondering if there is any new Percona certified xtradb cluster image on the way or a fix for these CVE’s affecting it? The current latest version is percona/percona-xtradb-cluster:8.0.39-30.1

Percona certified images - Percona Operator for MySQL

2

https://hub.docker.com/r/percona/percona-xtradb-cluster/tags

8.0.40 is the latest version, which should include fixes for these CVEs based on upstream.

3

Thank you matthewd for the quick response and glad to see the cve’s are addressed. I have another question. 8.0.40 is not yet in the percona certified images list: Percona certified images - Percona Operator for MySQL. I also couldnt find what it means that an image is certified. Should i hold off on upgrading untill 8.0.40 is certified?