Skip to content
OpenAdvisories
Unscored RHSA-2009:1289 4 CVEs

Red Hat Security Advisory: mysql security and bug fix update

Published Sep 15, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 14

ReleasePackageFixed in
Red Hat · RHEL 5 enterprise_linux:5::client mysql 0:5.0.77-3.el5
Red Hat · RHEL 5 enterprise_linux:5::client mysql-debuginfo 0:5.0.77-3.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation mysql 0:5.0.77-3.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation mysql-bench 0:5.0.77-3.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation mysql-debuginfo 0:5.0.77-3.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation mysql-devel 0:5.0.77-3.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation mysql-server 0:5.0.77-3.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation mysql-test 0:5.0.77-3.el5
Red Hat · RHEL 5 enterprise_linux:5::server mysql 0:5.0.77-3.el5
Red Hat · RHEL 5 enterprise_linux:5::server mysql-bench 0:5.0.77-3.el5
Red Hat · RHEL 5 enterprise_linux:5::server mysql-debuginfo 0:5.0.77-3.el5
Red Hat · RHEL 5 enterprise_linux:5::server mysql-devel 0:5.0.77-3.el5
Red Hat · RHEL 5 enterprise_linux:5::server mysql-server 0:5.0.77-3.el5
Red Hat · RHEL 5 enterprise_linux:5::server mysql-test 0:5.0.77-3.el5

Vulnerabilities 4

  • Unscored —
    CVE-2008-2079

    MySQL 4.1.x before 4.1.24, 5.0.x before 5.0.60, 5.1.x before 5.1.24, and 6.0.x before 6.0.5 allows local users to bypas…

  • Unscored —
    CVE-2008-3963 Public exploit

    MySQL 5.0 before 5.0.66, 5.1 before 5.1.26, and 6.0 before 6.0.6 does not properly handle a b'' (b single-quote single-…

  • Unscored —
    CVE-2008-4456 Public exploit

    Cross-site scripting (XSS) vulnerability in the command-line client in MySQL 5.0.26 through 5.0.45, and other versions …

  • Unscored —
    CVE-2009-2446 Public exploit EPSS 11%

    Multiple format string vulnerabilities in the dispatch_command function in libmysqld/sql_parse.cc in mysqld in MySQL 4.…

References

  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=462534
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=466518
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=470036
  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    http://www.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/5.4/html/Technical_Notes/mysql.html
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=435494
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=445222
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=448534
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=450178
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=452824
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=453156
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=455619
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=457218
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=462071
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=476896
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=511020
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1289.json
  • report
    https://access.redhat.com/security/cve/CVE-2008-2079
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-2079
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-2079
  • report
    https://access.redhat.com/security/cve/CVE-2008-3963
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-3963
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-3963
  • report
    https://access.redhat.com/security/cve/CVE-2008-4456
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-4456
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-4456
  • report
    https://access.redhat.com/security/cve/CVE-2009-2446
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-2446
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-2446