-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2020-c98c7da2f6 2020-04-30 03:42:10.988792 --------------------------------------------------------------------------------

Name : sqliteodbc Product : Fedora 31 Version : 0.9996 Release : 6.fc31 URL : http://www.ch-werner.de/sqliteodbc Summary : SQLite ODBC Driver Description : ODBC driver for SQLite interfacing SQLite 2.x and/or 3.x using the unixODBC or iODBC driver managers. For more information refer to: - http://www.sqlite.org - SQLite engine - http://www.unixodbc.org - unixODBC Driver Manager - http://www.iodbc.org - iODBC Driver Manager

-------------------------------------------------------------------------------- Update Information:

Fix CVE-2020-12050 (use mktemp(1) for temp. file name creation) -------------------------------------------------------------------------------- ChangeLog:

* Wed Apr 22 2020 Damian Wrobel dwrobel@ertelnet.rybnik.pl - 0.9996-6 - Fix CVE-2020-12050 (use mktemp(1) for temp. file name creation) - Use absolute paths for binaries -------------------------------------------------------------------------------- References:

[ 1 ] Bug #1825762 - Packaging vulnerability in sqliteODBC exposing to local privilege escalation to root https://bugzilla.redhat.com/show_bug.cgi?id=1825762 --------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2020-c98c7da2f6' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------