Piwik 2.16.3

[chris]

The ​Changelog contains:

Security release

This release is rated critical.

The Piwik security engineering team has internally identified a critical security issue and has fixed it in Piwik 2.16.3. We recommend all users to upgrade to this latest version.

Database upgrade

Note: This release contains major database upgrades and upgrading your database will take a long time if you have a lot of data in your database.

Please make sure you read the ​Update Piwik guide for high traffic instances.

[chris]

So following the notes at wiki:Piwik#Upgrades

sudo -i
cd /var/www
vi piwik/config/config.ini.php
export PIWIK="2.16.3"
wget "https://builds.piwik.org/piwik-$PIWIK.tar.gz"
wget "https://builds.piwik.org/piwik-$PIWIK.tar.gz.asc"
  gpg --verify piwik-$PIWIK.tar.gz.asc
  gpg: assuming signed data in `piwik-2.16.3.tar.gz'
  gpg: Signature made Sun 02 Oct 2016 11:38:49 PM GMT using RSA key ID 5590A237
  gpg: Good signature from "Matthieu Aubry <matt@piwik.org>"
  gpg:                 aka "Matthieu Aubry <matt@piwik.pro>"
  gpg:                 aka "Matthieu Aubry <matthieu.aubry@gmail.com>"
  gpg: WARNING: This key is not certified with a trusted signature!
  gpg:          There is no indication that the signature belongs to the owner.
  Primary key fingerprint: 814E 346F A01A 20DB B04B  6807 B5DB D592 5590 A237
cp piwik/config/config.ini.php .
tar -zxvf piwik-$PIWIK.tar.gz
cp config.ini.php piwik/config/
chown -R piwik:piwik /var/www/piwik/
php /var/www/piwik/console core:update
  
      *** Update ***
  
      Database Upgrade Required
  
      Your Piwik database is out-of-date, and must be upgraded before you can continue.
  
      Piwik database will be upgraded from version 2.16.2 to the new version 2.16.3.
  
      The following dimensions will be updated: log_visit.visit_entry_idaction_url.
  
  
  This is a major update! It will take longer than usual. 
  
      *** Note: this is a Dry Run ***
  
      ALTER TABLE `log_visit` MODIFY COLUMN `visit_entry_idaction_url` INTEGER(11) UNSIGNED NULL  DEFAULT NULL;
  
      *** End of Dry Run ***
  
  A database upgrade is required. Execute update? (y/N) Y
  
  Starting the database upgrade process now. This may take a while, so please be patient.
  
      *** Update ***
  
      Database Upgrade Required
  
      Your Piwik database is out-of-date, and must be upgraded before you can continue.
  
      Piwik database will be upgraded from version 2.16.2 to the new version 2.16.3.
  
      The following dimensions will be updated: log_visit.visit_entry_idaction_url.
  
      The database upgrade process may take a while, so please be patient.
  
    Executing ALTER TABLE `log_visit` MODIFY COLUMN `visit_entry_idaction_url` INTEGER(11) UNSIGNED NULL  DEFAULT NULL... 
  Done. [1 / 1]
  
  Piwik has been successfully updated!
  
  It appears you have executed this update with user root:root, while your Piwik files are owned by piwik:piwik. 
  
  To ensure that the Piwik files are readable by the correct user, you may need to run the following command (or a similar command depending on your server configuration):
  
  $ chown -R root:root /var/www/piwik

vi piwik/config/config.ini.php

The the web system check reports:

Huzzah! There are no problems with your Piwik setup. Give yourself a pat on the back.

So closing.