File _patchinfo of Package patchinfo.15095

<patchinfo incident="15095">
  <issue tracker="bnc" id="1141132">VUL-0: CVE-2019-13508: freetds: Heap overflow in FreeTDS if UDT type is used with protocol 5.0</issue>
  <issue tracker="cve" id="2019-13508"/>
  <packager>scarabeus_iv</packager>
  <rating>moderate</rating>
  <category>security</category>
  <summary>Security update for freetds</summary>
  <description>This update for freetds to 1.1.36 fixes the following issues:

Security issue fixed:

- CVE-2019-13508: Fixed a heap overflow that could have been caused by malicious servers sending UDT types over protocol version 5.0 (bsc#1141132).

Non-security issues fixed:

- Enabled Kerberos support
- Version update to 1.1.36:
  * Default TDS protocol version is now "auto"
  * Improved UTF-8 performances
  * TDS Pool Server is enabled
  * MARS support is enabled
  * NTLMv2 is enabled
  * See NEWS and ChangeLog for a complete list of changes
</description>
</patchinfo>
openSUSE Build Service is sponsored by