Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2020:1417-2

Опубликовано: 08 июл. 2020
Источник: suse-cvrf

Описание

Security update for freetds

This update for freetds to 1.1.36 fixes the following issues:

Security issue fixed:

  • CVE-2019-13508: Fixed a heap overflow that could have been caused by malicious servers sending UDT types over protocol version 5.0 (bsc#1141132).

Non-security issues fixed:

  • Enabled Kerberos support
  • Version update to 1.1.36:
    • Default TDS protocol version is now 'auto'
    • Improved UTF-8 performances
    • TDS Pool Server is enabled
    • MARS support is enabled
    • NTLMv2 is enabled
    • See NEWS and ChangeLog for a complete list of changes

Список пакетов

SUSE Linux Enterprise Module for Package Hub 15 SP1
libsybdb5-1.1.36-3.3.1
SUSE Linux Enterprise Module for Package Hub 15 SP2
libsybdb5-1.1.36-3.3.1
SUSE Linux Enterprise Module for Server Applications 15 SP2
libct4-1.1.36-3.3.1

Описание

FreeTDS through 1.1.11 has a Buffer Overflow.


Затронутые продукты
SUSE Linux Enterprise Module for Package Hub 15 SP1:libsybdb5-1.1.36-3.3.1
SUSE Linux Enterprise Module for Package Hub 15 SP2:libsybdb5-1.1.36-3.3.1
SUSE Linux Enterprise Module for Server Applications 15 SP2:libct4-1.1.36-3.3.1

Ссылки