ALAS-2016-756


Amazon Linux AMI Security Advisory: ALAS-2016-756
Advisory Release Date: 2016-10-12 17:00 Pacific
Severity: Important
References: CVE-2016-6662 

Issue Overview:

It was discovered that the MySQL logging functionality allowed writing to MySQL configuration files. An administrative database user, or a database user with FILE privileges, could possibly use this flaw to run arbitrary commands with root privileges on the system running the database server.


Affected Packages:

mysql55,mysql56


Issue Correction:
Run yum update mysql55 to update your system.
Run yum update mysql56 to update your system.

New Packages:
i686:
    mysql55-5.5.52-1.13.amzn1.i686
    mysql55-embedded-devel-5.5.52-1.13.amzn1.i686
    mysql55-debuginfo-5.5.52-1.13.amzn1.i686
    mysql55-embedded-5.5.52-1.13.amzn1.i686
    mysql55-devel-5.5.52-1.13.amzn1.i686
    mysql55-test-5.5.52-1.13.amzn1.i686
    mysql-config-5.5.52-1.13.amzn1.i686
    mysql55-libs-5.5.52-1.13.amzn1.i686
    mysql55-server-5.5.52-1.13.amzn1.i686
    mysql55-bench-5.5.52-1.13.amzn1.i686
    mysql56-embedded-devel-5.6.33-1.21.amzn1.i686
    mysql56-server-5.6.33-1.21.amzn1.i686
    mysql56-test-5.6.33-1.21.amzn1.i686
    mysql56-common-5.6.33-1.21.amzn1.i686
    mysql56-debuginfo-5.6.33-1.21.amzn1.i686
    mysql56-5.6.33-1.21.amzn1.i686
    mysql56-libs-5.6.33-1.21.amzn1.i686
    mysql56-devel-5.6.33-1.21.amzn1.i686
    mysql56-embedded-5.6.33-1.21.amzn1.i686
    mysql56-bench-5.6.33-1.21.amzn1.i686
    mysql56-errmsg-5.6.33-1.21.amzn1.i686

src:
    mysql55-5.5.52-1.13.amzn1.src
    mysql56-5.6.33-1.21.amzn1.src

x86_64:
    mysql55-5.5.52-1.13.amzn1.x86_64
    mysql55-debuginfo-5.5.52-1.13.amzn1.x86_64
    mysql55-devel-5.5.52-1.13.amzn1.x86_64
    mysql55-embedded-devel-5.5.52-1.13.amzn1.x86_64
    mysql55-libs-5.5.52-1.13.amzn1.x86_64
    mysql55-server-5.5.52-1.13.amzn1.x86_64
    mysql55-bench-5.5.52-1.13.amzn1.x86_64
    mysql55-test-5.5.52-1.13.amzn1.x86_64
    mysql-config-5.5.52-1.13.amzn1.x86_64
    mysql55-embedded-5.5.52-1.13.amzn1.x86_64
    mysql56-devel-5.6.33-1.21.amzn1.x86_64
    mysql56-common-5.6.33-1.21.amzn1.x86_64
    mysql56-embedded-5.6.33-1.21.amzn1.x86_64
    mysql56-5.6.33-1.21.amzn1.x86_64
    mysql56-embedded-devel-5.6.33-1.21.amzn1.x86_64
    mysql56-errmsg-5.6.33-1.21.amzn1.x86_64
    mysql56-server-5.6.33-1.21.amzn1.x86_64
    mysql56-libs-5.6.33-1.21.amzn1.x86_64
    mysql56-bench-5.6.33-1.21.amzn1.x86_64
    mysql56-debuginfo-5.6.33-1.21.amzn1.x86_64
    mysql56-test-5.6.33-1.21.amzn1.x86_64