RHSA-2019:2336: Moderate: unixODBC security update
The unixODBC packages contain a framework that supports accessing databases through the ODBC protocol.Security Fix(es): unixODBC: Buffer overflow in unicodetoansicopy() can lead to crash or other unspecified impact (CVE-2018-7409) unixODBC: Insecure buffer copy in SQLWriteFileDSN function in odbcinst/SQLWriteFileDSN.c (CVE-2018-7485) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.Additional Changes:For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.7 Release Notes linked from the References section.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2019:2336?
The severity of RHSA-2019:2336 is classified as moderate.
How do I fix RHSA-2019:2336?
To fix RHSA-2019:2336, you should update the unixODBC packages to the latest version available.
What vulnerabilities are addressed in RHSA-2019:2336?
RHSA-2019:2336 addresses a buffer overflow vulnerability in unicode_to_ansi_copy() which could lead to a crash or other unspecified impacts.
Is RHSA-2019:2336 applicable to all versions of unixODBC?
RHSA-2019:2336 is applicable to specific versions of unixODBC that are affected by the identified vulnerabilities.
What impact does the vulnerability in RHSA-2019:2336 have?
The vulnerability in RHSA-2019:2336 may lead to a crash of the application or other unspecified impacts due to the buffer overflow.