Openssl libs are added in 8.4.6 PS

MySQL & MariaDB Percona Distribution for MySQL
1

Hi,

We are performing major upgrades from 8.0 to 8.4 and noticed openssl libs are added back into linux generic binary tars.

lrwxrwxrwx. 1 mysqld dba 24 Sep 1 22:17 libssl.so → private/libssl.so.1.1.1k
lrwxrwxrwx. 1 mysqld dba 27 Sep 1 22:17 libcrypto.so → private/libcrypto.so.1.1.1k
lrwxrwxrwx. 1 mysqld dba 26 Sep 1 22:17 libk5crypto.so → private/libk5crypto.so.3.1

Databases upgraded to 8.4 were reported into our security vulnerability reports.

Openssl libs were removed after 8.0.36 due to security vulnerabilities. This is should be the case for 8.4.x as well. Kindly fix the binary tars for 8.4.x Percona server.

On a side note, these libs are not found in percona XtraDB cluster linux generic binary tar.

Thank you!

2

@Vadim_Yalovets Can you please help on this issue ?

3

hey @Chanakya
Please create a jira ticket about this so we will investigate it!

4

thank you @Evgeniy_Patlan I have created a Jira

5

Hi Chanakya,

Thank you for the report.
The fixed 8.4.7 tarballs are available at the following location.

6

Thank you @Vadim_Yalovets