SUSE-SU-2018:1832-1
Security update for unixODBC
Kaynağa göre önem derecesi
Hiçbir kaynak CVSS puanı vermiyor.
Trivy'nin kendi etiketi CRITICAL. Kritik diyenler: SUSE.
Açıklama
This update for unixODBC to version 2.3.6 fixes the following issues: - CVE-2018-7409: Buffer overflow in unicode_to_ansi_copy() was fixed in 2.3.5 (bsc#1082290) - CVE-2018-7485: Swapped arguments in SQLWriteFileDSN() in odbcinst/SQLWriteFileDSN.c (bsc#1082484) Other fixes: - Enabled --enable-fastvalidate option in configure (bsc#1044970)
Etkilenen paketler ve düzeltilmiş sürümler
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| SUSE Linux Enterprise 12.3 | unixODBC, unixODBC-32bit, unixODBC-devel | 2.3.6-7.9.1 |
1 kaynaktaki 3 kaydın hepsini göster
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| SUSE Linux Enterprise 12.3 | unixODBC | 2.3.6-7.9.1 |
| SUSE Linux Enterprise 12.3 | unixODBC-32bit | 2.3.6-7.9.1 |
| SUSE Linux Enterprise 12.3 | unixODBC-devel | 2.3.6-7.9.1 |
Referanslar
- https://bugzilla.suse.com/1044970
- https://bugzilla.suse.com/1082060
- https://bugzilla.suse.com/1082290
- https://bugzilla.suse.com/1082484
- https://lists.suse.com/pipermail/sle-security-updates/2018-June/004227.html
- https://www.suse.com/security/cve/CVE-2018-7409/
- https://www.suse.com/security/cve/CVE-2018-7485/
- https://www.suse.com/support/security/rating/