Any posts/updates on how to patch for the following?
CVE-2016-6663, Privilege Escalation / Race Condition (also referred to as CVE-2016-5616) CVE-2016-6664, Root Privilege Escalation (also referred to as CVE-2016-5617)
Thanks!
This textbox defaults to using Markdown to format your answer.
You can type !ref in this text area to quickly search our full set of tutorials, documentation & marketplace offerings and insert the link!
You can check you version to are you affected. There are many ways to check MySQL version. You can execute:
- mysql --version
it should output you version of MySQL, or login to MySQL cli:
- mysql -u user -p
when you login, you’ll see welcome message specifying your version.
CVE-2016-6663 Security tracker - Canonical | Security tracker - Debian. This CVE was fixed in version:
| MySQL developer | Fixed in version |
|---|---|
| Oracle MySQL | 5.5.52 |
| 5.6.33 | |
| 5.7.15 | |
| MariaDB | 5.5.52 |
| 10.1.18 | |
| 10.0.28 | |
| Percona | 5.5.41-37.0 |
| 5.6.32-25.17 | |
| 5.7.14-26.17 | |
| If you have version which is less then one in table, you’re affected and you need to do upgrade. |
CVE-2016-6664 Security tracker - Canonical | Security tracker - Debian. This CVE was fixed in version:
| MySQL developer | Fixed in version |
|---|---|
| Oracle MySQL | 5.5.51 |
| 5.6.32 | |
| 5.7.14 | |
| MariaDB | ALL VERSIONS AFFECTED, FIX IS STILL NOT AVAILABLE |
| Percona | 5.5.51-38.2 |
| 5.6.32-78-1 | |
| 5.7.14-8 | |
| If you have version which is less then one in table, you’re affected and you need to do upgrade. |
Required update should be in repositories. Updating the repo cache and executing upgrade will do the job.
- sudo apt-get update
- sudo apt-get upgrade
After upgrade finishes, check the version. If you are not anymore affected, you’re good to go. If you’re, return back, we’ll find way. :)
Become a contributor for community
Get paid to write technical tutorials and select a tech-focused charity to receive a matching donation.
DigitalOcean Documentation
Full documentation for every DigitalOcean product.
Resources for startups and SMBs
The Wave has everything you need to know about building a business, from raising funding to marketing your product.
The developer cloud
Scale up as you grow — whether you're running one virtual machine or ten thousand.
Get started for free
Sign up and get $200 in credit for your first 60 days with DigitalOcean.*
*This promotional offer applies to new accounts only.