Debian bug fixed : CVE-2017-6369: authenticated remote execution in firebird 2.5 before version 3.0.2

We believe that the bug you reported is fixed in the latest version of
firebird3.0, which is due to be installed in the Debian FTP archive.

 * Apply commit 56e9a73c168 from upstream B3_0_Release branch
    fixing authenticated remote execution vulnerability (CVE-2017-6369,
    CORE-5474)
    Closes: #858644

Forwarded: http://tracker.firebirdsql.org/browse/CORE-5474

Authenticated Firebird users are allowed to declare UDFs (user-defined
functions). The default config allows using all entry points from the standard
UDF library, which is dynamically linked with libc, with its symbols
re-exported, including system().

Relevant upstream commits for 3.0:
https://github.com/FirebirdSQL/firebird/commit/8b2a9cb44bf6055e15f016d70a6842b8ada60375

Update Available: Android Firebird JDBC Driver Jaybird 2.2.12

Android Firebird JDBC Driver Jaybird 2.2.12 is updated for Android Studio

Christian Mayer wrote on Android Jaybird discussion forum

Hi Toni,
i have updated the example in the download area.
Basically you have to go to File -> Project Structure and klick the green add sign in the upper left.
Then choose “Import .JAR/.AAR Package” and select the aar file.
After that in the group area select app and go to Dependencies.
Here klick the green add sign in the upper right a choose “Module Dependencies”
If that doesn’t work please use the provided example.

Ps: It’s compiled as Android-Library : AAR .
You can use it like this:
https://developer.android.com/studio/projects/android-library.html#AddDependency
or this:
http://docs.onemobilesdk.aol.com/android-ad-sdk/adding-aar-files.html

Firebird 3.02 is out!

Firebird Project is happy to announce general availability of Firebird 3.0.2 — the second point release in the Firebird 3.0 series.

This sub-release offers many bug fixes (including fix for a recently reported security vulnerability) and also adds a few minor features and improvements, please refer to the Release Notes for the full list of changes. Binary kits for Windows and Linux on both 32-bit and 64-bit platforms are immediately available for download.

Not using Firebird 3 yet? Get the Migration Guide to Firebird 3 and save you a lot of time in the migration process!

Firebird Pascal Client API 1.0.2 is now available for both FPC and Delphi

MWA Software’s  Firebird Pascal Client API package (fbintf) release 1.0.2 is now available for download. The package has been updated to support Delphi Win32 (from Delphi 2010 onwards) in addition to the Free Pascal Compiler (3.0.0 onwards). The package is otherwise functionally identical to release 1.0.1.

The Firebird Pascal Client API package provides common Pascal language bindings to the Firebird API that are independent of the Firebird API version. Both legacy and Firebird 3 APIs are supported. The fbintf package provides the Firebird API in a format where all data types for SQL data, interface parameters and results are native Pascal types, including all parameter blocks and database information. The Pascal API is pitched at a similar level and purpose to the IBPP Firebird API provided to the C++ world. It is a required dependency for version 2 onwards of IBX for Lazarus, and is provided as both a standalone package and as part of IBX2.

The Firebird Pascal API is intended to be simple to use and to place the minimum burden on the API user when it comes to managing the Firebird client library and the various Pascal objects that are created to provide the API. It is implemented as reference counted COM interfaces which, for the API user, are as easy to use as other managed types such as AnsiStrings and dynamic arrays. The user only needs to worry about accessing and using the interface; disposing of interfaces is performed automatically whenever an interface goes out of scope. It is intended to be a full implementation of the Firebird API, including events, services, blobs and arrays.

It is distributed under the IDP Licence.

The package may be downloaded from https://www.mwasoftware.co.uk/fb-pascal-api

A comprehensive user manual fully describing the API is available from https://www.mwasoftware.co.uk/documentation

1 2