Security Vulnerabilities fixed in unixODBC RHSA-2019:2336

Description

The unixODBC packages contain a framework that supports accessing databases through the ODBC protocol. Security Fix(es): * unixODBC: Buffer overflow in unicode_to_ansi_copy() can lead to crash or other unspecified impact (CVE-2018-7409) * unixODBC: Insecure buffer copy in SQLWriteFileDSN function in odbcinst/SQLWriteFileDSN.c (CVE-2018-7485) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.7 Release Notes linked from the References section.

Affected Applications

unixODBC

CVE References

CVE-2018-7409 CVE-2018-7485

Other References

https://access.redhat.com/errata/RHSA-2019:2336