[Bug 2003003] Re: unixODBC crashes when ODBC trace is enabled

[Lucas Kanashiro]

Thanks for taking the time to report this bug and trying to make Ubuntu
better.

I did not try to reproduce the bug myself but I found this upstream bug
which might be related to this issue:

https://github.com/lurcher/unixODBC/commit/965bffbb53b0a84a3311372f88a56db518240606

Could you please confirm if this commit on top of 2.3.9-5 fixes the
problem you have? Unfortunately, we cannot update to a new upstream
version in a stable release, so we need to find the right patch to be
backported to fix this bug.

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to unixodbc in Ubuntu.
https://bugs.launchpad.net/bugs/2003003

Title:
  unixODBC crashes when ODBC trace is enabled

Status in unixodbc package in Ubuntu:
  New

Bug description:
  The package unixODBC 2.3.9-5, that installs by default on Ubuntu 22.04
  contains a crash. If ODBC trace is enabled
  (https://www.easysoft.com/support/kb/kb00945.html) unixODBC will crash
  when calling GetDiagRec(). It reports a buffer overflow while calling
  a _sprintf. Newer version of unixODBC, 2.3.11, does not contain this
  bug (I've built one from source on my 22.04 VM).

  ProblemType: Bug
  DistroRelease: Ubuntu 22.04
  Package: unixodbc 2.3.9-5
  ProcVersionSignature: Ubuntu 5.15.0-57.63-generic 5.15.74
  Uname: Linux 5.15.0-57-generic x86_64
  ApportVersion: 2.20.11-0ubuntu82.1
  Architecture: amd64
  CasperMD5CheckResult: pass
  Date: Mon Jan 16 17:07:21 2023
  InstallationDate: Installed on 2023-01-10 (5 days ago)
  InstallationMedia: Ubuntu-Server 22.04 LTS "Jammy Jellyfish" - Release amd64 (20220421)
  ProcEnviron:
   TERM=xterm
   PATH=(custom, no user)
   XDG_RUNTIME_DIR=<set>
   LANG=en_US.UTF-8
   SHELL=/bin/bash
  RebootRequiredPkgs: Error: path contained symlinks.
  SourcePackage: unixodbc
  UpgradeStatus: No upgrade log present (probably fresh install)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/unixodbc/+bug/2003003/+subscriptions