topic Microsoft ODBC Vulnerability? in Qlik Replicate

Microsoft ODBC Vulnerability?

MoeE — Thu, 13 Jun 2024 06:13:54 GMT

Hi,

It was recently brought to my attention that there is a vulnerability issue with Microsoft ODBC 18, which is used for the SQL Server endpoints. Windows released a new fix for 18.3.3.1 for this vulnerability.

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-28929

https://www.cve.org/CVERecord?id=CVE-2024-28929

Regards,

Mohammed

Re: Microsoft ODBC Vulnerability?

john_wang — Thu, 13 Jun 2024 06:42:11 GMT

Hello Mohammed @MoeE ,

Thank you so much for the information. It's import for all of us.

From Qlik Replicate version 2024.5 and up, it's compatible with Microsoft ODBC Driver 18.3, however all lower versions were certified with Microsoft ODBC Driver 18.1. We'd like suggest you opening a support ticket so far we will check with R&D/PM team to verify the plan of importing 18.3 to lower Replicate versions.

BTW, please allow me summarize your another great article here: Any negative results of upgrading SQL Server ODBC to 18.3.

I really appreciate your brilliant support Mohammed @MoeE !

Regards,

John.

Re: Microsoft ODBC Vulnerability?

MoeE — Thu, 13 Jun 2024 06:48:26 GMT

Hi John,

Thanks, but I think it is you who provides the brilliant support.

Regards,

Mohammed

Re: Microsoft ODBC Vulnerability?

john_wang — Thu, 13 Jun 2024 06:51:18 GMT

Thank you Mohammed @MoeE ! I cannot make it without IBT especially without your support!

Re: Microsoft ODBC Vulnerability?

john_wang — Thu, 13 Jun 2024 07:00:54 GMT

Hello @MoeE ,

I'm gladly to share the Download link of ODBC Driver 18.3.3.1 for SQL Server which contains the vulnerability fix for who cares about the fix and uses Qlik Replicate 2024.5.

Best Regards,

John.