Patches for MySQL come from Oracle. You will need to create a user account with Oracle to have access to them. While I would not bother with them if my server was an On-Premise server and I did not have any access to it from the internet the choice is up to the customer.
Before applying any patch, ensure that the databases are properly backed up and the server system state itself is completely backed up, or a VM snapshot is taken.
Phil Robson
Senior Director Support DocuWare