mysql: unrestricted mysqld_safe's ledir (CPU Jan 2017)
It was discovered that the mysqldsafe script honored the ledir option value set in a MySQL configuration file. A user able to modify one of the MySQL configuration files could use this flaw to escalate their privileges to root...