Mysql从从5.6.14安全升级至安全升级至mysql5.6.25的方法的方法
服务器上Mysql的版本为：社区版的mysql-community-server-5.6.14。近日局方对服务器进行漏洞扫描，发现zhyh08上的
mysql存在几个高危漏洞，要求进行修复。受这几个漏洞影响的主要是5.6.17及以前的版本，所以将mysql升级至最新的5.6.25
即可解决问题。
1、下载最新的mysql安装包（rpm文件），链接如下：
MySQL-5.6.25-1.el6.x86_64.rpm-bundle.tar
2、备份数据库数据，这里使用的是mysqldump命令。
3、备份/etc/my.cnf：cp /etc/my.cnf /etc/my.cnf_backup
3、停止mysql服务：service mysql stop
4、解压上面的tar包：tar -xvf MySQL-5.6.25-1.el6.x86_64.rpm-bundle.tar
5、确认服务器上所安装的mysql的各个组件，这里我们只升级server和client。
[hadoop@zlyh08 chx]$ rpm -qa|grep -i mysql
mysql-community-libs-compat-5.6.14-3.el6.x86_64
mysql-community-devel-5.6.14-3.el6.x86_64
mysql-community-common-5.6.14-3.el6.x86_64
mysql-community-libs-5.6.14-3.el6.x86_64
mysql-community-server-5.6.14-3.el6.x86_64
mysql-community-client-5.6.14-3.el6.x86_64
perl-DBD-MySQL-4.013-3.el6.x86_64
[hadoop@zlyh08 chx]$
6、将server和client卸载：
rpm -e mysql-community-server-5.6.14-3.el6.x86_64
rpm -e mysql-community-client-5.6.14-3.el6.x86_64
注：如若不先卸载的话，安装时会报文件冲突：
[root@zlyh08 chx]# rpm -Uvh MySQL-server-5.6.25-1.el6.x86_64.rpm
Preparing... ########################################### [100%] file /usr/share/mysql/bulgarian/errmsg.sys from install of MySQL-server-5.6.25-
1.el6.x86_64 conflicts with file from package mysql-community-common-5.6.14-3.el6.x86_64
…………
file /usr/share/mysql/french/errmsg.sys from install of MySQL-server-5.6.25-1.el6.x86_64 conflicts with file from package mysql-community-common-
5.6.14-3.el6.x86_64
7、重新安装server和client：
[root@zlyh08 chx]# rpm -ivh MySQL-server-5.6.25-1.el6.x86_64.rpm
Preparing... ########################################### [100%] 1:MySQL-server ###########################################
[100%] 2015-07-01 16:02:40 0 [Warning] TIMESTAMP with implicit DEFAULT value is deprecated. Please use --explicit_defaults_for_timestamp server
option (see documentation for more details).
2015-07-01 16:02:40 0 [Note] /usr/sbin/mysqld (mysqld 5.6.25) starting as process 28611 ...
2015-07-01 16:02:40 28611 [Note] InnoDB: Using atomics to ref count buffer pool pages
2015-07-01 16:02:40 28611 [Note] InnoDB: The InnoDB memory heap is disabled
…………
2015-07-01 16:02:44 28633 [Note] InnoDB: FTS optimize thread exiting.
2015-07-01 16:02:44 28633 [Note] InnoDB: Starting shutdown...
2015-07-01 16:02:45 28633 [Note] InnoDB: Shutdown completed; log sequence number 1625987
A RANDOM PASSWORD HAS BEEN SET FOR THE MySQL root USER !
You will find that password in '/root/.mysql_secret'.#竟然没发现这一行，难怪装完一直连不上
----------
[root@appserver ~]# cat /root/.mysql_secret
# The random password set for the root user at Thu Nov 20 15:52:02 2014 (local time): sFpJCf6WLhyYKc35
----------
You must change that password on your first connect,
no other statement but 'SET PASSWORD' will be accepted.
See the manual for the semantics of the 'password expired' flag.
Also, the account for the anonymous user has been removed.
In addition, you can run:
/usr/bin/mysql_secure_installation
which will also give you the option of removing the test database.
This is strongly recommended for production servers.
See the manual for more instructions.
Please report any problems at http://bugs.mysql.com/
评论0