File _patchinfo of Package patchinfo.15095
<patchinfo incident="15095">
<issue tracker="bnc" id="1141132">VUL-0: CVE-2019-13508: freetds: Heap overflow in FreeTDS if UDT type is used with protocol 5.0</issue>
<issue tracker="cve" id="2019-13508"/>
<packager>scarabeus_iv</packager>
<rating>moderate</rating>
<category>security</category>
<summary>Security update for freetds</summary>
<description>This update for freetds to 1.1.36 fixes the following issues:
Security issue fixed:
- CVE-2019-13508: Fixed a heap overflow that could have been caused by malicious servers sending UDT types over protocol version 5.0 (bsc#1141132).
Non-security issues fixed:
- Enabled Kerberos support
- Version update to 1.1.36:
* Default TDS protocol version is now "auto"
* Improved UTF-8 performances
* TDS Pool Server is enabled
* MARS support is enabled
* NTLMv2 is enabled
* See NEWS and ChangeLog for a complete list of changes
</description>
</patchinfo>