EmergencyEMERGENCY? Get 24/7 Help Now!

Percona XtraDB Cluster 5.6.30-25.16.2 is now available (CVE-2016-6662 fix)

 | September 15, 2016 |  Posted In: Events and Announcements, MySQL, Percona Software, Percona XtraDB Cluster, Security

Percona XtraDB Cluster Reference Architecture

Percona  announces the new release of Percona XtraDB Cluster 5.6 on September 15, 2016. Binaries are available from the downloads area or our software repositories. Percona XtraDB Cluster 5.6.30-25.16.2 is now the current release, based on the following: Percona Server 5.6.30-76.3 Galera Replication library 3.16 Codership wsrep API version 25 This release provides a fix for CVE-2016-6662. […]

Read More

Is Your Database Affected by CVE-2016-6662?

 | September 12, 2016 |  Posted In: MySQL, Security

CVE-2016-6662

In this blog post, I will discuss the CVE-2016-6662 vulnerability, how to tell if it affects you, and how to prevent the vulnerability from affecting you if you have an older version of MySQL. I’ll also list which MySQL versions include the vulnerability fixes. As we announced in a previous post, there are certain scenarios in […]

Read More

Get MySQL Passwords in Plain Text from .mylogin.cnf

 | September 7, 2016 |  Posted In: MySQL, Security

MySQL Passwords

This post will tell you how to get MySQL passwords in plain text using the .mylogin.cnf file. Since MySQL 5.6.6, it became possible to store MySQL credentials in an encrypted login path file named .mylogin.cnf, using the mysql_config_editor tool. This is better than in plain text anyway. What if I need to read this password in […]

Read More

Webinar Thursday, September 1 – MongoDB Security: A Practical Approach

 | August 30, 2016 |  Posted In: MongoDB, Security, Technical Webinars

Percona MySQL and MongoDB Webinars

Please join David Murphy as he presents a webinar Thursday, September 1 at 10 am PDT (UTC-7) on MongoDB Security: A Practical Approach. (Date changed*) This webinar will discuss the many features and options available in the MongoDB community to help secure your database environment. First, we will cover how these features work and how to […]

Read More

Take Percona’s One-Click Database Security Downtime Poll

 | August 2, 2016 |  Posted In: MySQL, Security

database security downtime poll

Take Percona’s database security downtime poll. As Peter Zaitsev mentioned recently in his blog post on database support, the data breach costs can hit both your business reputation and your bottom line. Costs vary depending on the company size and market, but recent studies estimate direct costs ranging in average from $1.6M to 7.01M. Everyone agrees […]

Read More

MongoDB Security: Why pay for Enterprise when Open Source has you covered?

 | June 17, 2016 |  Posted In: MongoDB, Security

MongoDB Security

Does ensuring MongoDB security justify the cost of the Enterprise version? In my opinion, the answer is no. MongoDB Inc© blasted an email with a study showing that the average cost of a data breach can be $5.9M. You can find the key finding in IBM’s 2015 report here: NH Learning Solutions Key findings: Data breaches cost the most in the […]

Read More

MySQL password expiration features to help you comply with PCI-DSS

 | February 4, 2016 |  Posted In: Security

database security

PCI Compliance (section 8.2.4) requires users to change password every 90 days. Until MySQL 5.6.6 there wasn’t a built-in way to comply with this requirement. Since MySQL version 5.6.6 there’s a password_expired feature which allows to set a user’s password as expired. This has been added to the mysql.user table and its default value it’s […]

Read More

OpenSSH CVE-2016-0777: Details and Mitigation

 | January 14, 2016 |  Posted In: MySQL, Security

OpenSSH

Earlier today advisories were sent out regarding OpenSSH versions 5.4 through 7.1., informing users about a security bug in the software. In essence, the advisory instructed people to add the   UseRoaming no option to their ssh_config file, with a promise for further information to be made available shortly.   Add undocumented "UseRoaming no" to ssh_config or use "-oUseRoaming=no" […]

Read More

MongoDB and Percona TokuMX Security Guidelines

 | September 14, 2015 |  Posted In: MongoDB, MySQL, Security

Several reports we’re published in the news about how easy it is to access data stored in some NoSQL systems, including MongoDB. This is not surprising because security was rather relaxed in earlier versions of MongoDB . This post lists some of the common vulnerabilities in MongoDB and Percona TokuMX. Network Security One key point […]

Read More

Tips for avoiding malware from a lesson learned

 | June 26, 2015 |  Posted In: Security

In a recent article on the Percona blog, I recommended readers to a tool called CamStudio for making technical screen recordings. The blog post was very popular and got 300+ Facebook likes in a short time. Providentially though, a reader commented that the installer (as downloaded from the project website) installed “pretty annoying adware on […]

Read More

Percona’s widely read Percona Data Performance blog highlights our expertise in enterprise-class software, support, consulting and managed services solutions for both MySQL® and MongoDB® across traditional and cloud-based platforms. The decades of experience represented by our consultants is found daily in numerous and relevant blog posts.

Besides specific database help, the blog also provides notices on upcoming events and webinars.
Want to get weekly updates listing the latest blog posts? Subscribe to our blog now! Submit your email address below and we’ll send you an update every Friday at 1pm ET.

No, thank you. Please do not ask me again.