USN-6715-2: unixODBC vulnerability

5 June 2024

unixODBC could be made to crash or execute arbitrary code.

Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines.

Releases

USN-6715-1 fixed a vulnerability in unixODBC. This update provides the
corresponding fix for Ubuntu 24.04 LTS.

Original advisory details:

It was discovered that unixODBC incorrectly handled certain bytes.
An attacker could use this issue to execute arbitrary code or cause
a crash.

Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines.

The problem can be corrected by updating your system to the following package versions:

In general, a standard system update will make all the necessary changes.

USN-6715-1: odbcinst, unixodbc-common, odbcinst1debian2, libodbc1, unixodbc-dev, libodbc2, unixodbc, libodbcinst2, libodbccr2

Ubuntu Pro provides up to ten-year security coverage for over 23,000 open-source packages within the Ubuntu Main and Universe repositories.