Skip to content
OpenAdvisories
Unscored RHSA-2010:0110 4 CVEs

Red Hat Security Advisory: mysql security update

Published Sep 15, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 20

ReleasePackageFixed in
Red Hat · RHEL 4 enterprise_linux:4::as mysql 0:4.1.22-2.el4_8.3
Red Hat · RHEL 4 enterprise_linux:4::as mysql-bench 0:4.1.22-2.el4_8.3
Red Hat · RHEL 4 enterprise_linux:4::as mysql-debuginfo 0:4.1.22-2.el4_8.3
Red Hat · RHEL 4 enterprise_linux:4::as mysql-devel 0:4.1.22-2.el4_8.3
Red Hat · RHEL 4 enterprise_linux:4::as mysql-server 0:4.1.22-2.el4_8.3
Red Hat · RHEL 4 enterprise_linux:4::desktop mysql 0:4.1.22-2.el4_8.3
Red Hat · RHEL 4 enterprise_linux:4::desktop mysql-bench 0:4.1.22-2.el4_8.3
Red Hat · RHEL 4 enterprise_linux:4::desktop mysql-debuginfo 0:4.1.22-2.el4_8.3
Red Hat · RHEL 4 enterprise_linux:4::desktop mysql-devel 0:4.1.22-2.el4_8.3
Red Hat · RHEL 4 enterprise_linux:4::desktop mysql-server 0:4.1.22-2.el4_8.3
Red Hat · RHEL 4 enterprise_linux:4::es mysql 0:4.1.22-2.el4_8.3
Red Hat · RHEL 4 enterprise_linux:4::es mysql-bench 0:4.1.22-2.el4_8.3
Red Hat · RHEL 4 enterprise_linux:4::es mysql-debuginfo 0:4.1.22-2.el4_8.3
Red Hat · RHEL 4 enterprise_linux:4::es mysql-devel 0:4.1.22-2.el4_8.3
Red Hat · RHEL 4 enterprise_linux:4::es mysql-server 0:4.1.22-2.el4_8.3
Red Hat · RHEL 4 enterprise_linux:4::ws mysql 0:4.1.22-2.el4_8.3
Red Hat · RHEL 4 enterprise_linux:4::ws mysql-bench 0:4.1.22-2.el4_8.3
Red Hat · RHEL 4 enterprise_linux:4::ws mysql-debuginfo 0:4.1.22-2.el4_8.3
Red Hat · RHEL 4 enterprise_linux:4::ws mysql-devel 0:4.1.22-2.el4_8.3
Red Hat · RHEL 4 enterprise_linux:4::ws mysql-server 0:4.1.22-2.el4_8.3

Vulnerabilities 4

  • Unscored —
    CVE-2008-4098

    MySQL before 5.0.67 allows local users to bypass certain privilege checks by calling CREATE TABLE on a MyISAM table wit…

  • Unscored —
    CVE-2008-4456 Public exploit

    Cross-site scripting (XSS) vulnerability in the command-line client in MySQL 5.0.26 through 5.0.45, and other versions …

  • Unscored —
    CVE-2009-2446 Public exploit EPSS 11%

    Multiple format string vulnerabilities in the dispatch_command function in libmysqld/sql_parse.cc in mysqld in MySQL 4.…

  • Unscored —
    CVE-2009-4030

    MySQL 5.1.x before 5.1.41 allows local users to bypass certain privilege checks by calling CREATE TABLE on a MyISAM tab…

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    http://dev.mysql.com/doc/refman/4.1/en/symbolic-links-to-tables.html
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=454077
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=466518
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=511020
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=543653
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0110.json
  • report
    https://access.redhat.com/security/cve/CVE-2008-4098
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-4098
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-4098
  • report
    https://access.redhat.com/security/cve/CVE-2008-4456
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-4456
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-4456
  • report
    https://access.redhat.com/security/cve/CVE-2009-2446
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-2446
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-2446
  • report
    https://access.redhat.com/security/cve/CVE-2009-4030
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-4030
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-4030