Firebird Project will be moving its repositories to GitHub

Firebird Project will be moving its repositories to GitHub

Dimitry Yemanov wrote on Firebird-Devel list:

I’m asking present contributors to create accounts there. If anyone
(including past contributors) wants your past commits to be
automatically linked to your GitHub account and be shown in the
statistics, please report your account name in this thread, or make sure
that your *.users.sourceforge.net email is added as a secondary one at
GitHub.

For the moment there is already a github mirror for sourceforge firebird core
https://github.com/FirebirdSQL/core

How to migrate existing users from firebird 2.X to firebird 3?

Firebird 3 is using new method to validate users on the server.
Direct upgrade of security database is therefore impossible.
Described procedure will let you keep the list of firebird 2.X users
and all related information (firstname, lastname, etc.) except
password – new passwords will be generated randomly. Pay attention
that SYSDBA user is not touched – i.e. it will remain as was after
execution of upgrade procedure.
In the commands below replace
‘masterkey’ with actual SYSDBA password for appropriate (2.X/3.0)
firebird server.

In firebird 2.5 backup security database:

gbak -user sysdba -pas masterkey -b {host/path}security2.fdb security.fbk

In firebird 3 restore copy of 2.5 security database:

gbak -user sysdba -pas masterkey -c security.fbk {host/path}security2.5

And run users upgrade sql script:

isql -user sysdba -pas masterkey -i security_database.sql {host/path}security2.5

“security2.5” is a sample database name – you may use any other if you wish.

Upgrade Script will create users with new random passwords and type them to you.
It’s your responsibility to notify users about new passwords.

CVE-2016-1569 : FireBird bug introduced in 2.5.5: authenticated clients crash FireBird when running gbak with invalid parameter

The FireBird RDBMS can be crashed remotely by an authenticated client
by invoking gbak via the service manager using invalid command line
switch and lead to denial of service.

The issue was introduced in version 2.5.5.

Upstream report:
http://tracker.firebirdsql.org/browse/CORE-5068

Upstream fix: 
http://sourceforge.net/p/firebird/code/62783/

Debian bug:
https://bugs.debian.org/810599

CVE-2016-1569 Status in Debian:
https://security-tracker.debian.org/tracker/CVE-2016-1569
1 47 48 49 50 51 297