[ubuntu/bionic-proposed] unixodbc 2.3.4-1.1ubuntu1 (Accepted)

[Marc Deslauriers]

unixodbc (2.3.4-1.1ubuntu1) bionic; urgency=medium

  * SECURITY UPDATE: overflow in unicode_to_ansi_copy()
    - DriverManager/__info.c: properly null-terminate string, use strncat.
    - https://sourceforge.net/p/unixodbc/code/136/
    - CVE-2018-7409

Date: Fri, 09 Mar 2018 09:33:31 +0100
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/unixodbc/2.3.4-1.1ubuntu1
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 09 Mar 2018 09:33:31 +0100
Source: unixodbc
Binary: unixodbc libodbc1 unixodbc-dev odbcinst1debian2 odbcinst
Architecture: source
Version: 2.3.4-1.1ubuntu1
Distribution: bionic
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Description:
 libodbc1   - ODBC library for Unix
 odbcinst   - Helper program for accessing odbc ini files
 odbcinst1debian2 - Support library for accessing odbc ini files
 unixodbc   - Basic ODBC tools
 unixodbc-dev - ODBC libraries for UNIX (development files)
Changes:
 unixodbc (2.3.4-1.1ubuntu1) bionic; urgency=medium
 .
   * SECURITY UPDATE: overflow in unicode_to_ansi_copy()
     - DriverManager/__info.c: properly null-terminate string, use strncat.
     - https://sourceforge.net/p/unixodbc/code/136/
     - CVE-2018-7409
Checksums-Sha1:
 2f616f9378f8a5052ca6ab27b96d15efa3e46232 2213 unixodbc_2.3.4-1.1ubuntu1.dsc
 04e591700ba0234083509fbeeb6b17fe76eb6abb 19495 unixodbc_2.3.4-1.1ubuntu1.diff.gz
 020ee6ae8aeb5255e0a38046cb63037e93e0fd8e 5940 unixodbc_2.3.4-1.1ubuntu1_source.buildinfo
Checksums-Sha256:
 cd4ef93fd8ca00687eff65814f17e4a36371d72bed146f0b0b29ffffae8c3438 2213 unixodbc_2.3.4-1.1ubuntu1.dsc
 e9c44db4319f2c6e6a549c7570719bb2d28d03c0b4215c9e5e83a3d5274bfedd 19495 unixodbc_2.3.4-1.1ubuntu1.diff.gz
 62ba1509d99456795974dcd8c0c8cf6babc4e919296f7a60c360baa77ad1f77c 5940 unixodbc_2.3.4-1.1ubuntu1_source.buildinfo
Files:
 e42021e3c162c822efd45dc93314839b 2213 libs optional unixodbc_2.3.4-1.1ubuntu1.dsc
 2b494a535d44e0769f61b0cec6355533 19495 libs optional unixodbc_2.3.4-1.1ubuntu1.diff.gz
 c88e2647ade223e42236c7b607b05eff 5940 libs optional unixodbc_2.3.4-1.1ubuntu1_source.buildinfo
Original-Maintainer: Steve Langasek <vorlon at debian.org>

-----BEGIN PGP SIGNATURE-----
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=GaaY
-----END PGP SIGNATURE-----