[Snyk] Security upgrade mysql from 8.2 to 8.4.2

[tulik]

Snyk has created this PR to fix 5 vulnerabilities in the dockerfile dependencies of this project.

Keeping your Docker base image up-to-date means you’ll benefit from security fixes in the latest version of your chosen image.

Snyk changed the following file(s):

• docker/images/mysql/Dockerfile

We recommend upgrading to mysql:8.4.2, as this image has only 59 known vulnerabilities. To do this, merge this pull request, then verify your application still works as expected.

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Improper Validation of Integrity Check Value SNYK-ORACLE8-LIBSSH-6226959	310
	Improper Validation of Integrity Check Value SNYK-ORACLE8-LIBSSHCONFIG-6227084	310
	Improper Certificate Validation SNYK-ORACLE8-OPENSSL-2579569	300
	Access of Resource Using Incompatible Type ('Type Confusion') SNYK-ORACLE8-OPENSSL-3368721	300
	Improper Certificate Validation SNYK-ORACLE8-OPENSSLLIBS-2579536	300

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Access of Resource Using Incompatible Type ('Type Confusion')

[//]: # 'snyk:metadata:{"customTemplate":{"variablesUsed":[],"fieldsUsed":[]},"dependencies":[{"name":"mysql","from":"8.2","to":"8.4.2"}],"env":"prod","issuesToFix":[{"exploit_maturity":"Proof of Concept","id":"SNYK-ORACLE8-LIBSSH-6226959","priority_score":310,"priority_score_factors":[{"name":"confidentiality","value":"none"},{"name":"integrity","value":"high"},{"name":"availability","value":"none"},{"name":"scope","value":"unchanged"},{"name":"exploitCodeMaturity","value":"proofOfConcept"},{"name":"userInteraction","value":"none"},{"name":"privilegesRequired","value":"none"},{"name":"attackComplexity","value":"high"},{"name":"attackVector","value":"network"},{"name":"epss","value":0.96533},{"name":"isTrending","value":false},{"name":"publicationDate","value":"Sat Feb 03 2024 04:03:13 GMT+0000 (Coordinated Universal Time)"},{"name":"isReachable","value":false},{"name":"isTransitive","value":false},{"name":"isMalicious","value":false},{"name":"businessCriticality","value":"high"},{"name":"relativeImportance","value":"medium"},{"name":"relativePopularityRank","value":0},{"name":"impact","value":4.16},{"name":"likelihood","value":7.43},{"name":"scoreVersion","value":"V5"}],"severity":"medium","title":"Improper Validation of Integrity Check Value"},{"exploit_maturity":"Proof of Concept","id":"SNYK-ORACLE8-LIBSSHCONFIG-6227084","priority_score":310,"priority_score_factors":[{"name":"confidentiality","value":"none"},{"name":"integrity","value":"high"},{"name":"availability","value":"none"},{"name":"scope","value":"unchanged"},{"name":"exploitCodeMaturity","value":"proofOfConcept"},{"name":"userInteraction","value":"none"},{"name":"privilegesRequired","value":"none"},{"name":"attackComplexity","value":"high"},{"name":"attackVector","value":"network"},{"name":"epss","value":0.96533},{"name":"isTrending","value":false},{"name":"publicationDate","value":"Sat Feb 03 2024 04:09:30 GMT+0000 (Coordinated Universal Time)"},{"name":"isReachable","value":false},{"name":"isTransitive","value":false},{"name":"isMalicious","value":false},{"name":"businessCriticality","value":"high"},{"name":"relativeImportance","value":"medium"},{"name":"relativePopularityRank","value":0},{"name":"impact","value":4.16},{"name":"likelihood","value":7.43},{"name":"scoreVersion","value":"V5"}],"severity":"medium","title":"Improper Validation of Integrity Check Value"},{"exploit_maturity":"No Known Exploit","id":"SNYK-ORACLE8-OPENSSL-3368721","priority_score":300,"priority_score_factors":[{"name":"confidentiality","value":"high"},{"name":"integrity","value":"none"},{"name":"availability","value":"high"},{"name":"scope","value":"unchanged"},{"name":"exploitCodeMaturity"},{"name":"userInteraction","value":"none"},{"name":"privilegesRequired","value":"none"},{"name":"attackComplexity","value":"high"},{"name":"attackVector","value":"network"},{"name":"epss","value":0.003},{"name":"isTrending","value":false},{"name":"publicationDate","value":"Wed Mar 01 2023 00:27:14 GMT+0000 (Coordinated Universal Time)"},{"name":"isReachable","value":false},{"name":"isTransitive","value":false},{"name":"isMalicious","value":false},{"name":"businessCriticality","value":"high"},{"name":"relativeImportance","value":"high"},{"name":"relativePopularityRank","value":0},{"name":"impact","value":7.31},{"name":"likelihood","value":4.09},{"name":"scoreVersion","value":"V5"}],"severity":"high","title":"Access of Resource Using Incompatible Type ('Type Confusion')"},{"exploit_maturity":"No Known Exploit","id":"SNYK-ORACLE8-OPENSSLLIBS-2579536","priority_score":300,"priority_score_factors":[{"name":"confidentiality","value":"high"},{"name":"integrity","value":"high"},{"name":"availability","value":"none"},{"name":"scope","value":"unchanged"},{"name":"exploitCodeMaturity"},{"name":"userInteraction","value":"none"},{"name":"privilegesRequired","value":"none"},{"name":"attackComplexity","value":"high"},{"name":"attackVector","value":"network"},{"name":"epss","value":0.00231},{"name":"isTrending","value":false},{"name":"publicationDate","value":"Sun Apr 10 2022 08:38:58 GMT+0000 (Coordinated Universal Time)"},{"name":"isReachable","value":false},{"name":"isTransitive","value":false},{"name":"isMalicious","value":false},{"name":"businessCriticality","value":"high"},{"name":"relativeImportance","value":"high"},{"name":"relativePopularityRank","value":0},{"name":"impact","value":7.31},{"name":"likelihood","value":4.09},{"name":"scoreVersion","value":"V5"}],"severity":"high","title":"Improper Certificate Validation"},{"exploit_maturity":"No Known Exploit","id":"SNYK-ORACLE8-OPENSSL-2579569","priority_score":300,"priority_score_factors":[{"name":"confidentiality","value":"high"},{"name":"integrity","value":"high"},{"name":"availability","value":"none"},{"name":"scope","value":"unchanged"},{"name":"exploitCodeMaturity"},{"name":"userInteraction","value":"none"},{"name":"privilegesRequired","value":"none"},{"name":"attackComplexity","value":"high"},{"name":"attackVector","value":"network"},{"name":"epss","value":0.00231},{"name":"isTrending","value":false},{"name":"publicationDate","value":"Sun Apr 10 2022 08:38:58 GMT+0000 (Coordinated Universal Time)"},{"name":"isReachable","value":false},{"name":"isTransitive","value":false},{"name":"isMalicious","value":false},{"name":"businessCriticality","value":"high"},{"name":"relativeImportance","value":"high"},{"name":"relativePopularityRank","value":0},{"name":"impact","value":7.31},{"name":"likelihood","value":4.09},{"name":"scoreVersion","value":"V5"}],"severity":"high","title":"Improper Certificate Validation"}],"prId":"4de82eac-702f-4a58-9f69-56b3133cb0ac","prPublicId":"4de82eac-702f-4a58-9f69-56b3133cb0ac","packageManager":"dockerfile","priorityScoreList":[310,310,300,300,300],"projectPublicId":"174e06de-ec5d-445f-a933-1bc384be3dd4","projectUrl":"https://app.snyk.io/org/tulik/project/174e06de-ec5d-445f-a933-1bc384be3dd4?utm_source=github&utm_medium=referral&page=fix-pr","prType":"fix","templateFieldSources":{"branchName":"default","commitMessage":"default","description":"default","title":"default"},"templateVariants":["updated-fix-title","priorityScore"],"type":"auto","upgrade":["SNYK-ORACLE8-LIBSSH-6226959","SNYK-ORACLE8-LIBSSHCONFIG-6227084","SNYK-ORACLE8-OPENSSL-2579569","SNYK-ORACLE8-OPENSSL-3368721","SNYK-ORACLE8-OPENSSLLIBS-2579536"],"vulns":["SNYK-ORACLE8-LIBSSH-6226959","SNYK-ORACLE8-LIBSSHCONFIG-6227084","SNYK-ORACLE8-OPENSSL-3368721","SNYK-ORACLE8-OPENSSLLIBS-2579536","SNYK-ORACLE8-OPENSSL-2579569"],"patch":[],"isBreakingChange":false,"remediationStrategy":"vuln"}'

[codemaker-ai-app]

Hello from @codemakerai.

CodeMaker AI GitHub App integration.

Usage:

@codemakerai [command or prompt]

Assistant

All Assistant features are supported in GitHub. Assistant can answer general questions as well as questions directly
related to code. It also has code editing capabilities.

@codemakerai assistant prompt - the assistant prompt
@codemakerai prompt - the assistant prompt. Alias to assistant command.

Commands

Pull Request Commands - commands that can be posted as comments on the pull request:

@codemakerai help - prints this help message
@codemakerai review process - process the most recent code review and all it's comments
@codemakerai generate code [codepath] - generate code for all files in pull request, or only for matching code path.
@codemakerai generate docs [codepath] - generate documentation for all files in pull request, or only for matching code path.
@codemakerai replace code [codepath] - replace code for all files in pull request, or only for matching code path.
@codemakerai replace docs [codepath] - replace documentation for all files in pull request, or only for matching code path.
@codemakerai fix syntax - fixes the syntax in all files
@codemakerai commit undo - removes the most recent commit

Pull Request Code Review Commands - commands that can be posted as comments on the code review i.e. "Files changed" tab:

@codemakerai assistant prompt - the assistant prompt
@codemakerai explain - explains the code
@codemakerai review - reviews the code

Triggers

To automatically trigger certain actions on pull requests you can create and use the following GitHub labels.

codemakerai-pull-request-generate-documentation - automatically generates comments/documentation on Pull Request creation.
codemakerai-pull-request-syntax-autocorrection - automatically corrects syntax on Pull Request creation.
codemakerai-pull-request-review-process - automatically processes code review comments on Pull Request Review submission.

For in depth explanation of the features, please consult https://docs.codemaker.ai

In case of any issues please report them to https://community.codemaker.ai