shield Security update for unixodbc

SUSE-SLE-SERVER-12-SP3-2018-1240

This update for unixODBC to version 2.3.6 fixes the following issues: - CVE-2018-7409: Buffer overflow in unicode_to_ansi_copy() was fixed in 2.3.5 (bsc#1082290) - CVE-2018-7485: Swapped arguments in SQLWriteFileDSN() in odbcinst/SQLWriteFileDSN.c (bsc#1082484) Other fixes: - Enabled --enable-fastvalidate option in configure (bsc#1044970)

• Release Date
  Jun 27 2018
• References
  Bugzilla: 1044970, 1082484, 1082060, 1082290
  CVEs: CVE-2018-7409, CVE-2018-7485
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Server 12.3 aarch64

• Packages
  unixODBC
  ODBC driver manager with some drivers included

  2.3.6-7.9.1

  lock rpm

  lock src

SUSE Linux Enterprise Server 12.3 x86_64

• Packages
  unixODBC
  ODBC driver manager with some drivers included

  2.3.6-7.9.1

  lock rpm

  lock src

  unixODBC-32bit
  ODBC driver manager with some drivers included

  2.3.6-7.9.1

  lock rpm

SUSE Linux Enterprise Server 12.3 s390x

• Packages
  unixODBC
  ODBC driver manager with some drivers included

  2.3.6-7.9.1

  lock rpm

  lock src

  unixODBC-32bit
  ODBC driver manager with some drivers included

  2.3.6-7.9.1

  lock rpm

SUSE Linux Enterprise Server for SAP Applications 12.3 ppc64le

• Packages
  unixODBC
  ODBC driver manager with some drivers included

  2.3.6-7.9.1

  lock rpm

  lock src