Some development resources now point to Github[1], including release tarballs. [1] https://github.com/FirebirdSQL/firebird
The [URL] appears to indicate a security vulnerability in versions prior to 3.0.4.
"Because of the way BLOBs are implemented in Firebird, it is possible for a knowledgeable user to gain unauthorised access to their contents by a brute force method without having the necessary privileges to access the table containing them. Some work was done to ameliorate this risk in databases accessed by Firebird 3.0.4 or higher."[1] [1] https://www.firebirdsql.org/file/documentation/release_notes/html/en/3_0/rnfb30-general.html#rnfb30-general-v304
"If you are using the database encryption feature, or plan to do so, it is essential to upgrade to this sub-release. Refer to this report[1] for details."[2] [1] https://www.firebirdsql.org/file/documentation/release_notes/html/en/3_0/bug-303.html#bug-303-core-crypt-vuln [2] https://www.firebirdsql.org/file/documentation/release_notes/html/en/3_0/rnfb30-general-v303.html
The bug has been referenced in the following commit(s): https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=4d44504813bb967b88a83a61b31b42ecfd421758 commit 4d44504813bb967b88a83a61b31b42ecfd421758 Author: Andreas Sturmlechner <asturm@gentoo.org> AuthorDate: 2019-08-08 14:13:27 +0000 Commit: Andreas Sturmlechner <asturm@gentoo.org> CommitDate: 2019-08-08 16:51:33 +0000 dev-db/firebird: 3.0.4.33054.0 version bump Bug: https://bugs.gentoo.org/686150 Package-Manager: Portage-2.3.71, Repoman-2.3.17 Signed-off-by: Andreas Sturmlechner <asturm@gentoo.org> dev-db/firebird/Manifest | 1 + dev-db/firebird/firebird-3.0.4.33054.0.ebuild | 230 ++++++++++++++++++++++++++ 2 files changed, 231 insertions(+)
@maintainer(s), please drop vulnerable.
The bug has been referenced in the following commit(s): https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=2f1b7fab01208fea762ce9b179d2f55095c1381b commit 2f1b7fab01208fea762ce9b179d2f55095c1381b Author: Andreas Sturmlechner <asturm@gentoo.org> AuthorDate: 2019-08-16 07:40:15 +0000 Commit: Andreas Sturmlechner <asturm@gentoo.org> CommitDate: 2019-08-16 08:24:20 +0000 dev-db/firebird: Drop 3.0.2.32703.0-r2 Bug: https://bugs.gentoo.org/686150 Package-Manager: Portage-2.3.71, Repoman-2.3.17 Signed-off-by: Andreas Sturmlechner <asturm@gentoo.org> dev-db/firebird/Manifest | 1 - .../files/firebird-3.0.2.32703.0-gcc6.patch | 19 -- dev-db/firebird/firebird-3.0.2.32703.0-r2.ebuild | 235 --------------------- 3 files changed, 255 deletions(-)
