[debian-mysql] Reporting Security Vulnerabilities

[Baluyot, Dannie Oneil]

Good Day Package Maintainers,


We have used the official docker image of python:3.9-bullseye and performed security scan using Palo Alto Network - Prisma Cloud and these vulnerabilities below is reported when using the source package - mariadb-10.5. We would like to report it and let us know once the fix is available so we can update accordingly.



Thank you for your assistance.


CVE-2022-27377
CVE-2022-27380
CVE-2022-27376
CVE-2022-27387
CVE-2022-27382
CVE-2022-27383
CVE-2022-27381
CVE-2022-27385
CVE-2022-27384
CVE-2022-27378
CVE-2022-27386
CVE-2022-27379
CVE-2022-27456
CVE-2022-27457
CVE-2022-27458
CVE-2022-27444
CVE-2022-27447
CVE-2022-27452
CVE-2022-27455
CVE-2022-27449
CVE-2022-27448
CVE-2022-27451
CVE-2022-27445
CVE-2022-27446
CVE-2022-32083
CVE-2022-32084
CVE-2022-32082
CVE-2022-32081
CVE-2022-32085
CVE-2022-32086
CVE-2022-32087
CVE-2022-32088
CVE-2022-32089
CVE-2022-32091


 [cid:image001.png at 01D8A1AC.4E889390]
I Dannie Oneil L. Baluyot
I ATCP | Data + AI | Value Insights Platform
I Quezon Global One Center
I E: dannie.oneil.baluyot at accenture.com
 [cid:image002.png at 01D8A1AC.4E889390]


Accenture Confidential


________________________________

This message is for the designated recipient only and may contain privileged, proprietary, or otherwise confidential information. If you have received it in error, please notify the sender immediately and delete the original. Any other use of the e-mail by you is prohibited. Where allowed by local law, electronic communications with Accenture and its affiliates, including e-mail and instant messaging (including content), may be scanned by our systems for the purposes of information security and assessment of internal compliance with Accenture policy. Your privacy is important to us. Accenture uses your personal data only in compliance with data protection laws. For further information on how Accenture processes your personal data, please see our privacy statement at https://www.accenture.com/us-en/privacy-policy.
______________________________________________________________________________________

www.accenture.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/pkg-mysql-maint/attachments/20220727/c463dfdc/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.png
Type: image/png
Size: 2031 bytes
Desc: image001.png
URL: <http://alioth-lists.debian.net/pipermail/pkg-mysql-maint/attachments/20220727/c463dfdc/attachment-0002.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image002.png
Type: image/png
Size: 4750 bytes
Desc: image002.png
URL: <http://alioth-lists.debian.net/pipermail/pkg-mysql-maint/attachments/20220727/c463dfdc/attachment-0003.png>