Dear MySQL users,

MySQL Server 5.7.16, a new version of the popular Open Source
Database Management System, has been released. MySQL 5.7.16 is
recommended for use on production systems.

For an overview of what's new in MySQL 5.7, please see

http://dev.mysql.com/doc/refman/5.7/en/mysql-nutshell.html

For information on installing MySQL 5.7.16 on new servers, please see
the MySQL installation documentation at

http://dev.mysql.com/doc/refman/5.7/en/installing.html

MySQL Server 5.7.16 is available in source and binary form for a number of
platforms from our download pages at

http://dev.mysql.com/downloads/mysql/

MySQL Server 5.7.16 is also available from our repository for Linux
platforms, go here for details:

http://dev.mysql.com/downloads/repo/

Windows packages are available via the Installer for Windows or .ZIP
(no-install) packages for more advanced needs. The point and click
configuration wizards and all MySQL products are available in the
unified Installer for Windows:

http://dev.mysql.com/downloads/installer/

5.7.16 also comes with a web installer as an alternative to the full
installer.

The web installer doesn't come bundled with any actual products
and instead relies on download-on-demand to fetch only the
products you choose to install. This makes the initial download
much smaller but increases install time as the individual products
will need to be downloaded.

We welcome and appreciate your feedback, bug reports, bug fixes,
patches, etc.:

http://bugs.mysql.com/report.php

The following section lists the changes in MySQL 5.7 since
the release of MySQL 5.7.15. It may also be viewed online at

http://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-16.html

Enjoy!

Changes in MySQL 5.7.16 (2016-10-12)

Security Notes

* Incompatible Change: For STANDALONE and WIN builds, the
default secure_file_priv value has changed from the empty
string to NULL. This is a secure-by-default setting
because it disables import and export operations. To
permit those operations, set secure_file_priv to the path
name of the directory to use for those operations. (Bug
#24679907, Bug #24695274, Bug #24707666)

* The linked OpenSSL library for the MySQL Commercial
Server has been updated to version 1.0.1u. For a
description of issues fixed in this version, see
http://www.openssl.org/news/vulnerabilities.html.
This change does not affect the Oracle-produced MySQL
Community build of MySQL Server, which uses the yaSSL
library instead. (Bug #24753389)

Functionality Added or Changed

* yaSSL was upgraded to version 2.4.2. This upgrade
corrects issues with: Potential AES side channel leaks;
DSA padding for unusual sizes; the
SSL_CTX_load_verify_locations() OpenSSL compatibility
function failing to handle long path directory names.
(Bug #24512715, Bug #24740291)

On Behalf of the MySQL/ORACLE RE Team
Hery Ramilison

--
MySQL General Mailing List
For list archives: http://lists.mysql.com/mysql
To unsubscribe: http://lists.mysql.com/mysql