{"id":"openSUSE-SU-2026:22261-1","summary":"Security update for psqlODBC","details":"This update for psqlODBC fixes the following issues:\n\nChanges in psqlODBC:\n\n- Update to 18.00.0006:\n  * Large-object read overflows the application buffer\n    (CVE-2026-120057, bsc#1289252).\n  * Row cache overflow when a later FETCH changes the column count\n    (CVE-2026-120058, bsc#1289253).\n  * Driver uses a server-supplied column name as a format string\n    (CVE-2026-120059, bsc#1289254).\n  * Driver does not validate server-supplied counts and lengths\n    (CVE-2026-120060, bsc#1289255).\n  * ODBC escape parser stack buffer overflow\n    (CVE-2026-120061, bsc#1289256).\n  * SQL injection through SQLSpecialColumns table and schema names\n    (CVE-2026-120062, bsc#1289257).\n  * Stack buffer overflow when quoting long schema and table names\n    (CVE-2026-120063, bsc#1289258).\n  * Driver does not validate column numbers and row indexes in\n    binding and descriptor functions\n    (CVE-2026-120064, bsc#1289259).\n  * Driver does not escape a server-supplied column name in its\n    updatable-cursor queries (CVE-2026-120065, bsc#1289260).\n  * Log files are created with default permissions at a predictable\n    path and follow symbolic links\n    (CVE-2026-120066, bsc#1289261).\n  * Stack buffer overflow when reading the keyset (ctid/oid)\n    columns of an updatable cursor\n    (CVE-2026-120067, bsc#1289262).\n  * Hardening: SQLSetDescRecW stored a freed buffer and the address\n    of a local variable as deferred bound data. It now stores the\n    application's pointers, as SQLSetDescRec does.\n  * Hardening: SQLColumns returned uninitialized relkind and table\n    OID values when the table query returned no rows.\n  * Hardening: convert_linefeeds could dereference a NULL pointer\n    in one build configuration.\n  * Hardening: secure_sscanf limits an over-wide %Ns width,\n    msgtowstr checks for a zero buffer length, and the MSDTC\n    connect-string append is bounded.\n","modified":"2026-11-11T17:23:13.168183448Z","published":"2026-11-06T16:51:52Z","related":["CVE-2026-120057","CVE-2026-120058","CVE-2026-120059","CVE-2026-120060","CVE-2026-120061","CVE-2026-120062","CVE-2026-120063","CVE-2026-120064","CVE-2026-120065","CVE-2026-120066","CVE-2026-120067"],"upstream":["CVE-2026-120057","CVE-2026-120058","CVE-2026-120059","CVE-2026-120060","CVE-2026-120061","CVE-2026-120062","CVE-2026-120063","CVE-2026-120064","CVE-2026-120065","CVE-2026-120066","CVE-2026-120067"],"references":[{"type":"ADVISORY"},{"type":"REPORT","url":"https://bugzilla.suse.com/1289252"},{"type":"REPORT","url":"https://bugzilla.suse.com/1289253"},{"type":"REPORT","url":"https://bugzilla.suse.com/1289254"},{"type":"REPORT","url":"https://bugzilla.suse.com/1289255"},{"type":"REPORT","url":"https://bugzilla.suse.com/1289256"},{"type":"REPORT","url":"https://bugzilla.suse.com/1289257"},{"type":"REPORT","url":"https://bugzilla.suse.com/1289258"},{"type":"REPORT","url":"https://bugzilla.suse.com/1289259"},{"type":"REPORT","url":"https://bugzilla.suse.com/1289260"},{"type":"REPORT","url":"https://bugzilla.suse.com/1289261"},{"type":"REPORT","url":"https://bugzilla.suse.com/1289262"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-120057"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-120058"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-120059"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-120060"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-120061"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-120062"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-120063"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-120064"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-120065"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-120066"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-120067"}],"affected":[{"package":{"name":"psqlODBC","ecosystem":"openSUSE:Leap 16.0","purl":"pkg:rpm/opensuse/psqlODBC&distro=openSUSE%20Leap%2016.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.00.0006-bp160.1.1"}]}],"ecosystem_specific":{"binaries":[{"psqlODBC":"18.00.0006-bp160.1.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:22261-1.json"}}],"schema_version":"1.9.2"}