firebird2.0 security bug is now fixed in debian/gentoo

There is an grave security bug in firebird package 2.0 from debian and ubuntu
where an user can connect to the server with SYSDBA and NO password

The bug is now fixed in debian sid (unstable)

http://packages.debian.org/sid/firebird2.0-super
and here is the changelog

firebird2.0-super.init: stop exporting ISC_USER and ISC_PASSWORD.
Fixes a hole causing remote connections as user SYSDBA to succeed
without giving a password.
Closes: #481389 and CVE-2008-1880

Take an Open Source Database Survey

Do you know which open source feature is the most important? Do you know which open source database rocks and which one sucks? Is MySQL better than Postgres? Is Ingres worth considering? How does Firebird compare? Have you used, or have you considered using, an open source database?

Take a survey. It’s only 15 questions so it takes just a few minutes.

I’ll post a link where you can get the results once they have been compiled and prepared.

Installing pear MDB2 Driver for Firebird

This guide was tested on Ubuntu Hardy , I assume that php5-interbase and firebird is already installed

Next you will need to install MDB2 package using pear

Gambas 2 2.6 released

More Info: http://www.kde-apps.org/content/show.php?content=20018

Description: Gambas is a free development environment based on a Basic interpreter with object extensions, like Visual Basic (but it is NOT a clone!).

With Gambas, you can quickly design your program GUI with QT or GTK+, access MySQL, PostgreSQL, Firebird, ODBC and SQLite databases, pilot KDE applications with DCOP, translate your program into any language, create network applications easily, make 3D OpenGL applications, make CGI web applications, and so on…

Changelog: see http://gambas.sourceforge.net/changelog2.html

1 203 204 205 206 207 294