Microsoft ODBC Vulnerability?

[MoeE]

Hi,

It was recently brought to my attention that there is a vulnerability issue with Microsoft ODBC 18, which is used for the SQL Server endpoints. Windows released a new fix for 18.3.3.1 for this vulnerability.

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-28929

https://www.cve.org/CVERecord?id=CVE-2024-28929

Regards,

Mohammed

[john_wang]

Hello Mohammed  @MoeE ,

Thank you so much for the information. It's import for all of us.

From Qlik Replicate version 2024.5 and up, it's compatible with Microsoft ODBC Driver 18.3, however all lower versions were certified with Microsoft ODBC Driver 18.1. We'd like suggest you opening a support ticket so far we will check with R&D/PM team to verify the plan of importing 18.3 to lower Replicate versions.

BTW, please allow me summarize your another great article here: Any negative results of upgrading SQL Server ODBC to 18.3.

I really appreciate your brilliant support Mohammed @MoeE !

Regards,

John.

[MoeE]

Hi John,

Thanks, but I think it is you who provides the brilliant support.

Regards,

Mohammed

[john_wang]

Thank you Mohammed @MoeE ! I cannot make it without IBT especially without your support!

[john_wang · Accepted solution]

Hello @MoeE ,

I'm gladly to share the Download link of ODBC Driver 18.3.3.1 for SQL Server which contains the vulnerability fix for who cares about the fix and uses Qlik Replicate 2024.5.

Best Regards,

John.