Important: mysql55,mysql56

2016-10-12T17:00:00
ID ALAS-2016-756
Type amazon
Reporter Amazon
Modified 2016-10-12T17:00:00

Description

Issue Overview:

It was discovered that the MySQL logging functionality allowed writing to MySQL configuration files. An administrative database user, or a database user with FILE privileges, could possibly use this flaw to run arbitrary commands with root privileges on the system running the database server.

Affected Packages:

mysql55,mysql56

Issue Correction:
Run yum update mysql55 to update your system.
Run yum update mysql56 to update your system.

New Packages:

i686:  
    mysql55-5.5.52-1.13.amzn1.i686  
    mysql55-embedded-devel-5.5.52-1.13.amzn1.i686  
    mysql55-debuginfo-5.5.52-1.13.amzn1.i686  
    mysql55-embedded-5.5.52-1.13.amzn1.i686  
    mysql55-devel-5.5.52-1.13.amzn1.i686  
    mysql55-test-5.5.52-1.13.amzn1.i686  
    mysql-config-5.5.52-1.13.amzn1.i686  
    mysql55-libs-5.5.52-1.13.amzn1.i686  
    mysql55-server-5.5.52-1.13.amzn1.i686  
    mysql55-bench-5.5.52-1.13.amzn1.i686  
    mysql56-embedded-devel-5.6.33-1.21.amzn1.i686  
    mysql56-server-5.6.33-1.21.amzn1.i686  
    mysql56-test-5.6.33-1.21.amzn1.i686  
    mysql56-common-5.6.33-1.21.amzn1.i686  
    mysql56-debuginfo-5.6.33-1.21.amzn1.i686  
    mysql56-5.6.33-1.21.amzn1.i686  
    mysql56-libs-5.6.33-1.21.amzn1.i686  
    mysql56-devel-5.6.33-1.21.amzn1.i686  
    mysql56-embedded-5.6.33-1.21.amzn1.i686  
    mysql56-bench-5.6.33-1.21.amzn1.i686  
    mysql56-errmsg-5.6.33-1.21.amzn1.i686

src:  
    mysql55-5.5.52-1.13.amzn1.src  
    mysql56-5.6.33-1.21.amzn1.src

x86_64:  
    mysql55-5.5.52-1.13.amzn1.x86_64  
    mysql55-debuginfo-5.5.52-1.13.amzn1.x86_64  
    mysql55-devel-5.5.52-1.13.amzn1.x86_64  
    mysql55-embedded-devel-5.5.52-1.13.amzn1.x86_64  
    mysql55-libs-5.5.52-1.13.amzn1.x86_64  
    mysql55-server-5.5.52-1.13.amzn1.x86_64  
    mysql55-bench-5.5.52-1.13.amzn1.x86_64  
    mysql55-test-5.5.52-1.13.amzn1.x86_64  
    mysql-config-5.5.52-1.13.amzn1.x86_64  
    mysql55-embedded-5.5.52-1.13.amzn1.x86_64  
    mysql56-devel-5.6.33-1.21.amzn1.x86_64  
    mysql56-common-5.6.33-1.21.amzn1.x86_64  
    mysql56-embedded-5.6.33-1.21.amzn1.x86_64  
    mysql56-5.6.33-1.21.amzn1.x86_64  
    mysql56-embedded-devel-5.6.33-1.21.amzn1.x86_64  
    mysql56-errmsg-5.6.33-1.21.amzn1.x86_64  
    mysql56-server-5.6.33-1.21.amzn1.x86_64  
    mysql56-libs-5.6.33-1.21.amzn1.x86_64  
    mysql56-bench-5.6.33-1.21.amzn1.x86_64  
    mysql56-debuginfo-5.6.33-1.21.amzn1.x86_64  
    mysql56-test-5.6.33-1.21.amzn1.x86_64