RHSA-2020:4999: Moderate: unixODBC security update
The unixODBC packages contain a framework that supports accessing databases through the ODBC protocol.Security Fix(es): unixODBC: Buffer overflow in unicodetoansicopy() can lead to crash or other unspecified impact (CVE-2018-7409) unixODBC: Insecure buffer copy in SQLWriteFileDSN function in odbcinst/SQLWriteFileDSN.c (CVE-2018-7485) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2020:4999?
The severity of RHSA-2020:4999 is classified as moderate.
How do I fix RHSA-2020:4999?
To fix RHSA-2020:4999, update the unixODBC package to the latest version provided by your distribution.
What vulnerabilities are addressed in RHSA-2020:4999?
RHSA-2020:4999 addresses a buffer overflow vulnerability in the unicode_to_ansi_copy() function and other security concerns in unixODBC.
What systems are affected by RHSA-2020:4999?
RHSA-2020:4999 affects systems that have the unixODBC package installed.
What is the potential impact of the vulnerabilities in RHSA-2020:4999?
The potential impact includes crashing the service or causing other unspecified issues due to the buffer overflow.