Amazon Linux 1 Security Advisory: ALAS-2016-756
Advisory Release Date: 2016-10-12 17:00 Pacific
Advisory Updated Date: 2016-10-12 17:00 Pacific
Severity:
Important
Issue Overview:
It was discovered that the MySQL logging functionality allowed writing to MySQL configuration files. An administrative database user, or a database user with FILE privileges, could possibly use this flaw to run arbitrary commands with root privileges on the system running the database server.
Affected Packages:
mysql55, mysql56
Issue Correction:
Run yum update mysql55 to update your system.
Run yum update mysql56 to update your system.
New Packages:
i686:
mysql55-5.5.52-1.13.amzn1.i686
mysql55-embedded-devel-5.5.52-1.13.amzn1.i686
mysql55-debuginfo-5.5.52-1.13.amzn1.i686
mysql55-embedded-5.5.52-1.13.amzn1.i686
mysql55-devel-5.5.52-1.13.amzn1.i686
mysql55-test-5.5.52-1.13.amzn1.i686
mysql-config-5.5.52-1.13.amzn1.i686
mysql55-libs-5.5.52-1.13.amzn1.i686
mysql55-server-5.5.52-1.13.amzn1.i686
mysql55-bench-5.5.52-1.13.amzn1.i686
mysql56-embedded-devel-5.6.33-1.21.amzn1.i686
mysql56-server-5.6.33-1.21.amzn1.i686
mysql56-test-5.6.33-1.21.amzn1.i686
mysql56-common-5.6.33-1.21.amzn1.i686
mysql56-debuginfo-5.6.33-1.21.amzn1.i686
mysql56-5.6.33-1.21.amzn1.i686
mysql56-libs-5.6.33-1.21.amzn1.i686
mysql56-devel-5.6.33-1.21.amzn1.i686
mysql56-embedded-5.6.33-1.21.amzn1.i686
mysql56-bench-5.6.33-1.21.amzn1.i686
mysql56-errmsg-5.6.33-1.21.amzn1.i686
src:
mysql55-5.5.52-1.13.amzn1.src
mysql56-5.6.33-1.21.amzn1.src
x86_64:
mysql55-5.5.52-1.13.amzn1.x86_64
mysql55-debuginfo-5.5.52-1.13.amzn1.x86_64
mysql55-devel-5.5.52-1.13.amzn1.x86_64
mysql55-embedded-devel-5.5.52-1.13.amzn1.x86_64
mysql55-libs-5.5.52-1.13.amzn1.x86_64
mysql55-server-5.5.52-1.13.amzn1.x86_64
mysql55-bench-5.5.52-1.13.amzn1.x86_64
mysql55-test-5.5.52-1.13.amzn1.x86_64
mysql-config-5.5.52-1.13.amzn1.x86_64
mysql55-embedded-5.5.52-1.13.amzn1.x86_64
mysql56-devel-5.6.33-1.21.amzn1.x86_64
mysql56-common-5.6.33-1.21.amzn1.x86_64
mysql56-embedded-5.6.33-1.21.amzn1.x86_64
mysql56-5.6.33-1.21.amzn1.x86_64
mysql56-embedded-devel-5.6.33-1.21.amzn1.x86_64
mysql56-errmsg-5.6.33-1.21.amzn1.x86_64
mysql56-server-5.6.33-1.21.amzn1.x86_64
mysql56-libs-5.6.33-1.21.amzn1.x86_64
mysql56-bench-5.6.33-1.21.amzn1.x86_64
mysql56-debuginfo-5.6.33-1.21.amzn1.x86_64
mysql56-test-5.6.33-1.21.amzn1.x86_64