Annoucements about Firebird oficial releases.
Here is the full text for the CVE-2012-5529
TraceManager in Firebird 2.5.0 and 2.5.1, when trace is enabled, allows remote authenticated users to cause a denial of service (NULL pointer dereference and crash) by preparing an empty dynamic SQL query.
Solution to this Security vulnerability is to Upgrade to Firebird 2.5.2
The packaging is ready and anybody wanting to build the package can
find the sources in the Git repository[1]. Since Debian is in a freeze
preparing to its next release, I asked the release team for a freeze
exception[2]. It would be great to have the final release in
Debian/wheezy.
[1] http://git.debian.org/?p=pkg-firebird/2.5.git;a=summary
[2] http://bugs.debian.org/693216
sudo su
apt-get git-core devscripts
apt-get build-dep firebird2.5
git clone http://anonscm.debian.org/git/pkg-firebird/2.5.git
cd 2.5
git-buildpackage
Ignore the last error debsign: gpg error occurred! Aborting (it only for Debian maintainers who sign the package like Damyan)
all the packages will be in ../
you can install for example firebird super classic this way
cd ../
sudo dpkg -i firebird2.5-superclassic* firebird2.5-common* firebird2.5-server-common* firebird2.5-classic-common*
ps: the above instructions were tested on Ubuntu 12.10 , Stable Firebird ppa is updated for all Ubuntu Releases
Here are the Firebird 2.5.2 packages for Fedora and RedHat Enterprise Linux
The Firebird JDBC team is happy to announce the release of Jaybird 2.2.1.
This release contains the following fixes:
UnsatisfiedLinkError in libjaybird22(_x64).so undefined symbol: _ZTVN10__cxxabiv117__class_type_infoE on Linux (JDBC-259)columnLabelForName for backwards compatible behavior of ResultSetMetaData#getColumnName(int) and compatibility with bug in com.sun.rowset.CachedRowSetImpl (JDBC-260).true for backwards compatible behavior (getColumnName() returns the column label); don’t set the property or set it to false for JDBC-compliant behavior (recommended).setString(column, null) on “? IS (NOT) NULL” condition does not set parameter to NULL (JDBC-264)charSet connection property now accepts all aliases of the supported Java character sets (eg instead of only Cp1252 now windows-1252 is also accepted) (JDBC-267)charSet property are case-sensitive (JDBC-268)NULL with the native protocol does not work when Firebird describes the parameter as not nullable (JDBC-271)The release is also available on maven:
<groupId>org.firebirdsql.jdbc</groupId>
<artifactId>jaybird-jdkXX</artifactId>
<version>2.2.1</version>
The artifactId depends on your target Java version: jaybird-jdk15, jaybird-jdk16 or jaybird-jdk17
I’m proud to introduce you brand new shiny release of DDEX provider
for Visual Studio. Now with Visual Studio 2012 (RTM) support. Grab it
while it’s hot.
The Firebird JDBC team is happy to announce the release of Jaybird 2.2.0.
This release contains the following changes:
Fixes since Jaybird 2.2.0-beta-1:
* ConcurrentModificationException when closing connection obtained from org.firebirdsql.ds.FBConnectionPoolDataSource with statements open (JDBC-250),
* Memory leak when obtaining multiple connections for the same URL (JDBC-249),
* CPU spikes to 100% when using events and Firebird Server is stopped or unreachable (JDBC-232),
* Events do not work on Embedded (JDBC-247),
* Provide workaround for characterset transliteration problems indatabase filenames and other connection properties (JDBC-253),
* FBBackupManager does not allow 16kb page size for restore (JDBC-255),
* Log warning and add warning on Connection when no explicit connectioncharacter set is specified (JDBC-257).
The release is also available on maven(*):
The artifactId depends on your target Java version: jaybird-jdk15, jaybird-jdk16 or jaybird-jdk17.
Important CHAR_TO_UUID CORE bug fix for for big-endian servers (ex: debian on IBM s390x or sparc64/powerpc) also that fixes GEN_UUID to return a compliant RFC-4122 UUID:
It has been discovered that before Firebird 2.5.2, CHAR_TO_UUID and UUID_TO_CHAR works incorrectly in big-endian servers. In these machines, bytes/characters are swapped and goes in wrong positions when converting. This bug was fixed in 2.5.2 and 3.0, but that means these functions now returns different values (for the same input parameter) than before.
ps: And here is Firebird development discussion and here is the full patch
If you want to know on what endian os you have you can check the Endianness Table
Accordingly to its release lifetime policy, Firebird Project notifies that the Firebird v2.0 series has reached its end of life and thus will not be maintained anymore. The last official release in this series, Firebird 2.0.7, which has been announced this year, will be available from the “discontinued” section of the download area.
The Firebird roadmap is updated , we are waiting for Firebird 3.0.x Alpha 
Firebird Project is pleased to announce Firebird 2.1.5 – the latest minor release in the Firebird 2.1 series.
Binary kits for Windows, Linux and MacOSX on both 32-bit and 64-bit platforms are immediately available for download. For MacOSX, LIPO (fat client) packages are also included. For the full list of changes please refer to the Release Notes.