CVE and update status of the FreeBSD ports tree4,526 unaddressed CVEs in 616 portsAll times are CET

Port details

databases/firebird30-server3.0.12

Firebird-3 relational database (server)

Maintainer
acm@FreeBSD.org
Packages
firebird30-server 3.0.12
Upstream
up to date
CPE
firebirdsql:firebird from the port
WWW
https://www.firebirdsql.org/
Links
cgit · VuXML

Unaddressed (10) · The CVE record lists this version as affected, no VuXML entry names the CVE

Updating to 3.0.14 would fix 10 of 10 unaddressed CVEs, according to the CVE records.
Fixed up to each version, cumulative: 3.0.13 1 · 3.0.14 10
CVE-2026-403429.92026-04-17Firebird is an open-source relational database management system. In versions prior to 5.0.4, 4.0.7 and 3.0.14, the external engine plugin loader concatenates a user-sup…
CVE-2026-282248.22026-04-17Firebird is an open-source relational database management system. In versions prior to 5.0.4, 4.0.7 and 3.0.14, when the server receives an op_crypt_key_callback packet …
CVE-2026-278908.22026-04-17Firebird is an open-source relational database management system. In versions prior to 5.0.4, 4.0.7 and 3.0.14, when processing CNCT_specific_data segments during authen…
CVE-2025-651047.92026-04-17Firebird is an open-source relational database management system. In versions FB3 of the client library placed incorrect data length values into XSQLDA fields when commu…
CVE-2026-352157.52026-04-17Firebird is an open-source relational database management system. In versions prior to 5.0.4, 4.0.7 and 3.0.14, the sdl_desc() function does not validate the length of a…
CVE-2026-342327.52026-04-17Firebird is an open-source relational database management system. In versions prior to 5.0.4, 4.0.7 and 3.0.14, the xdr_status_vector() function does not handle the isc_…
CVE-2026-333377.52026-04-17Firebird is an open-source relational database management system. In versions prior to 5.0.4, 4.0.7 and 3.0.14, when deserializing a slice packet, the xdr_datum() functi…
CVE-2026-282127.52026-04-17Firebird is an open-source relational database management system. In versions prior to 6.0.0, 5.0.4, 4.0.7 and 3.0.14, when processing an op_slice network packet, the se…
CVE-2026-282146.02026-04-17Firebird is an open-source relational database management system. In versions prior to 5.0.4, 4.0.7 and 3.0.14, the ClumpletReader::getClumpletSize() function can overfl…
CVE-2025-549895.32025-08-15Firebird is a relational database. Prior to versions 3.0.13, 4.0.6, and 5.0.3, there is an XDR message parsing NULL pointer dereference denial-of-service vulnerability i…

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (0)

No VuXML entries for this package.

Commits (18)

Muhammad Moinur Rahman (bofh) · 3.0.12
databases/firebird30-server: Unbreak

- Update version 3.0.11=>3.0.12

Changelog:
https://firebirdsql.org/file/documentation/release_notes/html/en/3_0/rlsnotes30.html

Approved by:	portmgr (just-fix-it)
0e409ffb28
Daniel Engberg (diizzy) · 3.0.11
databases/firebird30-client: Mark BROKEN, fails to build with ICU 76.1

PR:		283543
Approved by:	portmgr (blanket)
c2a2ab4f8c
Jose Alonso Cardenas Marquez (acm) · 3.0.11
databases/firebird30-*: update to 3.0.11

ChangeLog at:	https://firebirdsql.org/file/documentation/release_notes/html/en/3_0/rlsnotes30.html
e57d04311e
Muhammad Moinur Rahman (bofh) · 3.0.10_4
*/*: Sunset 12.4-RELEASE/12-STABLE from ports tree

- Remove all references to defunct ARCH arm
- Remove all references to defunct ARCH sparc64
- Remove x11-drivers/xf86-video-sunffb which requires defunct sparc64
  ARCH
- Remove sysutils/afbinit requires defunct sparc64 ARCH
- Remove all references to bktr driver
- Remove all references to defunct FreeBSD_12
- Remove all references to OSVERSION/OSREL corresponding to 12
- Remove conditionals in Mk/Uses/cabal.mk
- Remove sparc reference from Mk/Uses/qt-dist.mk
- Remove BROKEN_sparc64/NOT_FOR_ARCH=sparc64
- Remove BROKEN_FreeBSD_12* from:
- Remove OpenSSL patches from:
- Remove conditional flags for OSVERSION >= 1300000 to fixed flags.
  Also move conditional flags for non sparc64/arm ARCH to fixed flags.

Reviewed by:	brooks, jbeich, rene, salvadore
Differential Revision: https://reviews.freebsd.org/D42068
bbab7f59e9
Jan Beich (jbeich) · 3.0.10_4
devel/icu: update to 74.1

Changes:	https://github.com/unicode-org/icu/releases/tag/release-74-1
Reported by:	GitHub (watch releases)
PR:		274317
Exp-run by:	antoine (incomplete)
Approved by:	fluffy
e55b80195e
Dimitry Andric (dim) · 3.0.10_3
databases/firebird30-server: fix build with lld 17

Building databases/firebird30-server with lld 17 results in the
following link error:

  c++  -O2 -pipe  -DAMD64 -fstack-protector-strong -isystem /usr/local/include -fno-strict-aliasing   -isystem /usr/local/include -std=gnu++03   -fstack-protector-strong -L/usr/local/lib  -D_THREAD_SAFE   -Wl,-rpath,/usr/local/lib -Wl,-rpath,/usr/local/libexec/firebird/intl  -Wl,--version-script,empty.vers -Wl,-rpath,../gen/firebird/lib /wrkdirs/share/dim/ports/databases/firebird30-client/work/Firebird-3.0.10.33601-0/temp/Release/gpre/c_cxx.o /wrkdirs/share/dim/ports/databases/firebird30-client/work/Firebird-3.0.10.33601-0/temp/Release/gpre/cmd.o /wrkdirs/share/dim/ports/databases/firebird30-client/work/Firebird-3.0.10.33601-0/temp/Release/gpre/cme.o /wrkdirs/share/dim/ports/databases/firebird30-client/work/Firebird-3.0.10.33601-0/temp/Release/gpre/cmp.o /wrkdirs/share/dim/ports/databases/firebird30-client/work/Firebird-3.0.10.33601-0/temp/Release/gpre/exp.o /wrkdirs/share/dim/ports/databases/firebird30-client/work/Firebird-3.0.10.33601-0/temp/Release/gpre/gpre.o /wrkdirs/share/dim/ports/databases/firebird30-client/work/Firebird-3.0.10.33601-0/temp/Release/gpre/hsh.o /wrkdirs/share/dim/ports/databases/firebird30-client/work/Firebird-3.0.10.33601-0/temp/Release/gpre/int_cxx.o /wrkdirs/share/dim/ports/databases/firebird30-client/work/Firebird-3.0.10.33601-0/temp/Release/gpre/jrdmet.o /wrkdirs/share/dim/ports/databases/firebird30-client/work/Firebird-3.0.10.33601-0/temp/Release/gpre/movg.o /wrkdirs/share/dim/ports/databases/firebird30-client/work/Firebird-3.0.10.33601-0/temp/Release/gpre/msc.o /wrkdirs/share/dim/ports/databases/firebird30-client/work/Firebird-3.0.10.33601-0/temp/Release/gpre/obj_cxx.o /wrkdirs/share/dim/ports/databases/firebird30-client/work/Firebird-3.0.10.33601-0/temp/Release/gpre/par.o /wrkdirs/share/dim/ports/databases/firebird30-client/work/Firebird-3.0.10.33601-0/temp/Release/gpre/pat.o /wrkdirs/share/dim/ports/databases/firebird30-client/work/Firebird-3.0.10.33601-0/temp/Release/gpre/sqe.o /wrkdirs/share/dim/ports/databases/firebird30-client/work/Firebird-3.0.10.33601-0/temp/Release/gpre/sql.o /wrkdirs/share/dim/ports/databases/firebird30-client/work/Firebird-3.0.10.33601-0/temp/Release/gpre/boot/gpre_meta_boot.o /wrkdirs/share/dim/ports/databases/firebird30-client/work/Firebird-3.0.10.33601-0/temp/Release/yvalve/gds.o /wrkdirs/share/dim/ports/databases/firebird30-client/work/Firebird-3.0.10.33601-0/temp/Release/common.a -o /wrkdirs/share/dim/ports/databases/firebird30-client/work/Firebird-3.0.10.33601-0/gen/Release/firebird/bin/gpre_boot -L/wrkdirs/share/dim/ports/databases/firebird30-client/work/Firebird-3.0.10.33601-0/gen/Release/firebird/lib -liconv -lm  -lpthread -lcurses
  ld: error: version script assignment of 'global' to symbol '_IO_stdin_used' failed: symbol not defined
  c++: error: linker command failed with exit code 1 (use -v to see invocation)

The mentioned symbol is only relevant for Linux. Remove it from the
builds/posix/vers.sh.in script that generates the linker version script.

PR:		274335
Approved by:	maintainer timeout (2 weeks)
MFH:		2023Q4
a47b90ce18
Jan Beich (jbeich) · 3.0.10_3
devel/icu: update to 73.1

- Temporarily switch to GitHub auto archive (release artifacts are N/A atm)

Changes:	https://github.com/unicode-org/icu/releases/tag/release-73-1
Reported by:	GitHub (watch releases)
PR:		270422
Exp-run by:	antoine
f1f1a8be88
Muhammad Moinur Rahman (bofh) · 3.0.10_2
databases/firebird30-*: Fix consumers build

After firebird25-* was removed from the tree firebird30-* bacem the new
default. And some consumers of firebird started failing to build with
the error "/usr/local/include/ibase.h:6:10: fatal error:
'../jrd/ibase.h' file not found".

In previous the src headers files were installed which were not
sanitized and required other header files from the source tree. This
patch properly installs the sanitized header files and fixes the
consumer builds.

While I am here fix the patches to be makepatch compatible.

Approved by:	portmgr(just-fix-it)
54ce503f0a
Jose Alonso Cardenas Marquez (acm) · 3.0.10_1
databases/firebird30-*: Fix build on FreeBSD >= 13.x
a5c229cda0
Jose Alonso Cardenas Marquez (acm) · 3.0.10
databases/firebird30-*: update to 3.0.10

ChangeLog at:	https://firebirdsql.org/file/documentation/release_notes/html/en/3_0/rlsnotes30.html
5a46821501
Jan Beich (jbeich) · 3.0.7_3
devel/icu: update to 72.1

Changes:	https://github.com/unicode-org/icu/releases/tag/release-72-1
Reported by:	GitHub (watch releases)
PR:		266582
Exp-run by:	antoine
dfe25d73e7
Stefan Eßer (se) · 3.0.7_2
Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)
fb16dfecae
Stefan Eßer (se) · 3.0.7_2
Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)
b7f05445c0
Jan Beich (jbeich) · 3.0.7_2
devel/icu: update to 71.1

Changes:	https://github.com/unicode-org/icu/releases/tag/release-71-1
Reported by:	GitHub (watch releases)
PR:		262654
Exp-run by:	antoine
Approved by:	fluffy
268cee3b02
Stefan Eßer (se) · 3.0.7_1
*/*: Remove redundant '-*' from CONFLICTS definitions

The conflict checks compare the patterns first against the package
names without version (as reported by "pkg query "%n"), then - if
there was no match - agsinst the full package names including the
version (as reported by "pkg query "%n-%v").

Approved by: portmgr (blanket)
04b9da4140
Jan Beich (jbeich) · 3.0.7_1
devel/icu: update to 70.1

Changes:	https://github.com/unicode-org/icu/releases/tag/release-70-1
Reported by:	GitHub (watch releases)
PR:		258794
Exp-run by:	antoine
f34ece3aa6
Bernhard Froehlich (decke) · 3.0.7
databases/firebird30-server: Fix CPE information because current one is deprecated

Approved by:    portmgr (blanket)
c72044c8d7
Jose Alonso Cardenas Marquez (acm) · 3.0.7
databases/fireird30-[client|server]: New port: Firebird-3 relational database

Firebird is a relational database offering many ANSI SQL-99 features
that runs on Linux, Windows, and a variety of Unix platforms.  Firebird
offers excellent concurrency, high performance, and powerful language
support for stored procedures and triggers.  It has been used in
production systems, under a variety of names since 1981.

Firebird is completely free of any registration, licensing or deployment
fees.  It may be deployed freely for use with any third-party software,
whether commercial or not.

WWW: https://sourceforge.net/projects/firebird/
WWW: http://www.firebirdsql.org/
PR:		254387
ca43515803