Hi Folks,
We make use of the PXC8 tarball versions (to allow non-root install etc). For RHEL8 servers we’ve initially been deploying the tarball based around glibc2.17 i.e. downloaded from:
Whilst this does work we’ve noticed it contains old 1.0.2k ssl libs which is a concern from a vulnerability scan perspective e.g: OpenSSL 1.0.2 < 1.0.2za Vulnerability<!-- --> | Tenable®
Looking at the Percona download site (for PXC 8.0.32 by example) there seems to be 3 different glibc versions available:
- Percona-XtraDB-Cluster_8.0.32-24.2_Linux.x86_64.glibc2.17.tar.gz
- Percona-XtraDB-Cluster_8.0.32-24.2_Linux.x86_64.glibc2.34.tar.gz
- Percona-XtraDB-Cluster_8.0.32-24.2_Linux.x86_64.glibc2.35.tar.gz
My understanding of glibc versions for RHEL is:
- RHEL7 - glibc2.17
- RHEL8 - glibc2.28
- RHEL9 - glibc2.34
…and this is quite strict I believe.
Is there a reason therefore that glibc2.28 (i.e RHEL8) versions of these tarballs do not exist?
many thanks,
Neil