One more reason to upgrade to Firebird 2.5.2 : CVE-2012-5529

News via oss-sec and [pkg-firebird-general] mailing list
A denial of service flaw was found in the way the TraceManager of
Firebird, performed preparation of an empty dynamic SQL query. When the trace mode was
enabled, a remote, authenticated database user could use this flaw
to cause the Firebird server to crash with a NULL pointer dereference.

References: [1] http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=693210
[2] http://tracker.firebirdsql.org/browse/CORE-3884
[3] https://bugzilla.redhat.com/show_bug.cgi?id=876613

Relevant upstream patch: [4]
http://firebird.svn.sourceforge.net/viewvc/firebird?pathrev=54702&revision=54702&view=revision

Firebird 2.5.2 Debian and Ubuntu status

The packaging is ready and anybody wanting to build the package can
find the sources in the Git repository[1]. Since Debian is in a freeze
preparing to its next release, I asked the release team for a freeze
exception[2]. It would be great to have the final release in
Debian/wheezy.

[1] http://git.debian.org/?p=pkg-firebird/2.5.git;a=summary
[2] http://bugs.debian.org/693216

sudo su
apt-get git-core devscripts
apt-get build-dep firebird2.5
git clone http://anonscm.debian.org/git/pkg-firebird/2.5.git
cd 2.5
git-buildpackage

Ignore the last error debsign: gpg error occurred! Aborting (it only for Debian maintainers who sign the package like Damyan)

all the packages will be in ../

you can install for example firebird super classic this way

cd ../
sudo dpkg -i firebird2.5-superclassic* firebird2.5-common* firebird2.5-server-common* firebird2.5-classic-common*

ps: the above instructions were tested on Ubuntu 12.10 , Stable Firebird ppa is updated for all Ubuntu Releases

Database Workbench 4.3.2 released

Upscene Productions is proud to announce the next
version of the popular multi-DBMS development tool:

Database Workbench 4.3.2 Pro

For more information, see here.

This version includes fixes for issues as reported by our users.

Previous changes include:

  • Stored Procedure, Function and Trigger Debugger for MySQL
  • Incremental search of data in SQL, Table & View Editor
  • Syntax check in Trigger Editor for Firebird & InterBase

And much more: click here for the full list of changes in v4.3.2

The free Lite Editions will be released later.

Database Workbench supports:
– Borland InterBase (6.x – XE )
– Firebird ( 1.x, 2.x )
– MS SQL Server/MSDE ( 7, 2000, 2005, 2008, MSDE 1 & 2, SQL Express )
– MySQL 4.x, 5.x
– Oracle Database ( 8i, 9i, 10g, 11g )
– Sybase SQL Anywhere ( 9, 10, 11 and 12 )
– NexusDB ( 3.0 and up )

You like this news? Twitter it! Share it! Blog about it!

If you want to promote and blog about Database Workbench, send us an e-mail for a free license.

1 2 3 4 5 6 32