Create BigFix package for Oracle MySQL

Content Authoring
1

Hi,
Is it safe to create package fixlet for Oracle MySQL in the BigFix? please assist.

The goal is upgrade MySql to version 5.6.42 to fix the “Oracle MySQL October 2018 Critical Patch Update (CPUOCT2018)” Vulnerability. so we want to push that from BigFix instead of manual upgrade.

Oracle MySQL Risk Matrix-
https://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html#AppendixMSQL

2

We create custom tasks in Bigfix all the time to apply various Oracle CPU patches. My advice is to have your DBA script out what he would do manually, then run that via a custom task or fixlet in Bigfix.

One of the idiosyncrasies I’ve seen when CPU patching Oracle databases is the need to terminate any and all possible processes that may be trying to use it. That includes monitoring and OS processes.