Lucene search

K
suseSuseOPENSUSE-SU-2020:0741-1
HistoryMay 30, 2020 - 12:00 a.m.

Security update for freetds (moderate)

2020-05-3000:00:00
lists.opensuse.org
105

EPSS

0.002

Percentile

64.7%

An update that fixes one vulnerability is now available.

Description:

This update for freetds to 1.1.36 fixes the following issues:

Security issue fixed:

  • CVE-2019-13508: Fixed a heap overflow that could have been caused by
    malicious servers sending UDT types over protocol version 5.0
    (bsc#1141132).

Non-security issues fixed:

  • Enabled Kerberos support
  • Version update to 1.1.36:
    • Default TDS protocol version is now “auto”
    • Improved UTF-8 performances
    • TDS Pool Server is enabled
    • MARS support is enabled
    • NTLMv2 is enabled
    • See NEWS and ChangeLog for a complete list of changes

This update was imported from the SUSE:SLE-15:Update update project.

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or “zypper patch”.

Alternatively you can run the command listed for your product:

  • openSUSE Leap 15.1:

    zypper in -t patch openSUSE-2020-741=1

OSVersionArchitecturePackageVersionFilename
openSUSE Leap15.1i586< - openSUSE Leap 15.1 (i586 x86_64):- openSUSE Leap 15.1 (i586 x86_64):.i586.rpm
openSUSE Leap15.1x86_64< - openSUSE Leap 15.1 (i586 x86_64):- openSUSE Leap 15.1 (i586 x86_64):.x86_64.rpm