Changes in MySQL 5.5.52 (2016-09-06, General Availability)

Bugs Fixed

• Replication: mysqlbinlog --read-from-remote-server log1 log2 was opening a new connection for log2 without freeing the connection used for log1. Thanks to Laurynas Biveinis for the contribution. (Bug #81675, Bug #23540182)

• For mysqld_safe, the argument to --malloc-lib now must be one of the directories /usr/lib, /usr/lib64, /usr/lib/i386-linux-gnu, or /usr/lib/x86_64-linux-gnu. In addition, the --mysqld and --mysqld-version options are accepted only on the command line, not in option files. (Bug #24464380)

  References: See also: Bug #24619033, Bug #82920.

• It was possible to write log files ending with .ini or .cnf that later could be parsed as option files. The general query log and slow query log can no longer be written to a file ending with .ini or .cnf. (Bug #24388753)

• Privilege escalation was possible by exploiting the way REPAIR TABLE used temporary files. (Bug #24388746)

• Certain internal character-handling functions could fail to handle a too-large character and cause a server exit. (Bug #23296299)

• A blank server name in CREATE SERVER statements produced a server exit rather than an error. (Bug #23295288)

• The optimizer failed to check a function return value for an area calculation, leading to a server exit. (Bug #23280059)

• A prepared statement that used a parameter in the select list of a derived table that was part of a join could cause a server exit. (Bug #22392374, Bug #24380263)

• MEDIUMINT columns used in operations with long integer values could result in buffer overflow. (Bug #19984392)

• EINTR handling in the client library has been fixed so that interrupted read and write calls are retried. Previously, EINTR was ignored. (Bug #82019, Bug #23703570)