CVE and update status of the FreeBSD ports tree4,526 unaddressed CVEs in 616 portsAll times are CET

Port details

databases/firebird40-server4.0.5_2

Firebird-4 relational database (server)

Maintainer
acm@FreeBSD.org
Packages
firebird40-server 4.0.5_2
Upstream
Higher version available: 5.0.4
CPE
firebirdsql:firebird from the port
WWW
https://www.firebirdsql.org/
Links
cgit · VuXML

Unaddressed (10) · The CVE record lists this version as affected, no VuXML entry names the CVE

Updating to 4.0.7 would fix 10 of 10 unaddressed CVEs, according to the CVE records.
Fixed up to each version, cumulative: 4.0.6 2 · 4.0.7 10
CVE-2026-403429.92026-04-17Firebird is an open-source relational database management system. In versions prior to 5.0.4, 4.0.7 and 3.0.14, the external engine plugin loader concatenates a user-sup…
CVE-2026-282248.22026-04-17Firebird is an open-source relational database management system. In versions prior to 5.0.4, 4.0.7 and 3.0.14, when the server receives an op_crypt_key_callback packet …
CVE-2026-278908.22026-04-17Firebird is an open-source relational database management system. In versions prior to 5.0.4, 4.0.7 and 3.0.14, when processing CNCT_specific_data segments during authen…
CVE-2026-352157.52026-04-17Firebird is an open-source relational database management system. In versions prior to 5.0.4, 4.0.7 and 3.0.14, the sdl_desc() function does not validate the length of a…
CVE-2026-342327.52026-04-17Firebird is an open-source relational database management system. In versions prior to 5.0.4, 4.0.7 and 3.0.14, the xdr_status_vector() function does not handle the isc_…
CVE-2026-333377.52026-04-17Firebird is an open-source relational database management system. In versions prior to 5.0.4, 4.0.7 and 3.0.14, when deserializing a slice packet, the xdr_datum() functi…
CVE-2026-282127.52026-04-17Firebird is an open-source relational database management system. In versions prior to 6.0.0, 5.0.4, 4.0.7 and 3.0.14, when processing an op_slice network packet, the se…
CVE-2025-249757.12025-08-15Firebird is a relational database. Prior to snapshot versions 4.0.6.3183, 5.0.2.1610, and 6.0.0.609, Firebird is vulnerable if ExtConnPoolSize is not set equal to 0. If …
CVE-2026-282146.02026-04-17Firebird is an open-source relational database management system. In versions prior to 5.0.4, 4.0.7 and 3.0.14, the ClumpletReader::getClumpletSize() function can overfl…
CVE-2025-549895.32025-08-15Firebird is a relational database. Prior to versions 3.0.13, 4.0.6, and 5.0.3, there is an XDR message parsing NULL pointer dereference denial-of-service vulnerability i…

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (0)

No VuXML entries for this package.

Commits (21)

Muhammad Moinur Rahman (bofh) · 4.0.5_2
databases/firebird40-server: Add missing header file

iberror.h file includes another file called gen/iberror.h which was not
installed by the pkg. This cannot be easily spotted unless other ports
tries to use the header.

Approved by:	portmgr (just-fix-it)
6c31889280
Daniel Engberg (diizzy) · 4.0.5_1
*/*: Bump consumers of devel/icu

...to avoid library mismatches
ff33dd4700
Jose Alonso Cardenas Marquez (acm) · 4.0.5
databases/firebird40-*: Update to 4.0.5

- Switch to c++17. It could fix some issues with new version of devel/icu [1]

PR:		283543
Reported by:	diizzy [1]
953c1209f5
Jose Alonso Cardenas Marquez (acm) · 4.0.4
databases/firebird40-*: Update to 4.0.4

ChangeLog at:	https://firebirdsql.org/file/documentation/release_notes/html/en/4_0/rlsnotes40.html
80d5951cf3
Muhammad Moinur Rahman (bofh) · 4.0.2_2
*/*: Sunset 12.4-RELEASE/12-STABLE from ports tree

- Remove all references to defunct ARCH arm
- Remove all references to defunct ARCH sparc64
- Remove x11-drivers/xf86-video-sunffb which requires defunct sparc64
  ARCH
- Remove sysutils/afbinit requires defunct sparc64 ARCH
- Remove all references to bktr driver
- Remove all references to defunct FreeBSD_12
- Remove all references to OSVERSION/OSREL corresponding to 12
- Remove conditionals in Mk/Uses/cabal.mk
- Remove sparc reference from Mk/Uses/qt-dist.mk
- Remove BROKEN_sparc64/NOT_FOR_ARCH=sparc64
- Remove BROKEN_FreeBSD_12* from:
- Remove OpenSSL patches from:
- Remove conditional flags for OSVERSION >= 1300000 to fixed flags.
  Also move conditional flags for non sparc64/arm ARCH to fixed flags.

Reviewed by:	brooks, jbeich, rene, salvadore
Differential Revision: https://reviews.freebsd.org/D42068
bbab7f59e9
Jan Beich (jbeich) · 4.0.2_2
devel/icu: update to 74.1

Changes:	https://github.com/unicode-org/icu/releases/tag/release-74-1
Reported by:	GitHub (watch releases)
PR:		274317
Exp-run by:	antoine (incomplete)
Approved by:	fluffy
e55b80195e
Dimitry Andric (dim) · 4.0.2_1
databases/firebird40-server: fix build with lld 17

Building databases/firebird40-server with lld 17 results in the
following link error:

  c++  -O2 -pipe  -DAMD64 -fstack-protector-strong -isystem /usr/local/include -fno-strict-aliasing   -isystem /usr/local/include -std=c++11  -std=c++11 -std=c++11 -std=c++11 -static-libstdc++ -Wl,--version-script,firebird.vers  -fstack-protector-strong -L/usr/local/lib  -D_THREAD_SAFE  -shared   -Wl,-soname,libfbclient.so.4 -Wl,-rpath,/usr/local/lib  -o /wrkdirs/share/dim/ports/databases/firebird40-client/work/Firebird-4.0.2.2816-0/gen/Release/firebird/lib/libfbclient.so.4.0.2 /wrkdirs/share/dim/ports/databases/firebird40-client/work/Firebird-4.0.2.2816-0/temp/Release/yvalve/DistributedTransaction.o /wrkdirs/share/dim/ports/databases/firebird40-client/work/Firebird-4.0.2.2816-0/temp/Release/yvalve/MasterImplementation.o /wrkdirs/share/dim/ports/databases/firebird40-client/work/Firebird-4.0.2.2816-0/temp/Release/yvalve/PluginManager.o /wrkdirs/share/dim/ports/databases/firebird40-client/work/Firebird-4.0.2.2816-0/temp/Release/yvalve/alt.o /wrkdirs/share/dim/ports/databases/firebird40-client/work/Firebird-4.0.2.2816-0/temp/Release/yvalve/array.o /wrkdirs/share/dim/ports/databases/firebird40-client/work/Firebird-4.0.2.2816-0/temp/Release/yvalve/blob.o /wrkdirs/share/dim/ports/databases/firebird40-client/work/Firebird-4.0.2.2816-0/temp/Release/yvalve/gds.o /wrkdirs/share/dim/ports/databases/firebird40-client/work/Firebird-4.0.2.2816-0/temp/Release/yvalve/keywordsStub.o /wrkdirs/share/dim/ports/databases/firebird40-client/work/Firebird-4.0.2.2816-0/temp/Release/yvalve/perf.o /wrkdirs/share/dim/ports/databases/firebird40-client/work/Firebird-4.0.2.2816-0/temp/Release/yvalve/preparse.o /wrkdirs/share/dim/ports/databases/firebird40-client/work/Firebird-4.0.2.2816-0/temp/Release/yvalve/user_dsql.o /wrkdirs/share/dim/ports/databases/firebird40-client/work/Firebird-4.0.2.2816-0/temp/Release/yvalve/utl.o /wrkdirs/share/dim/ports/databases/firebird40-client/work/Firebird-4.0.2.2816-0/temp/Release/yvalve/why.o /wrkdirs/share/dim/ports/databases/firebird40-client/work/Firebird-4.0.2.2816-0/temp/Release/yvalve/config/os/posix/binreloc.o /wrkdirs/share/dim/ports/databases/firebird40-client/work/Firebird-4.0.2.2816-0/temp/Release/yvalve/config/os/posix/config_root.o /wrkdirs/share/dim/ports/databases/firebird40-client/work/Firebird-4.0.2.2816-0/temp/Release/remote/inet.o /wrkdirs/share/dim/ports/databases/firebird40-client/work/Firebird-4.0.2.2816-0/temp/Release/remote/merge.o /wrkdirs/share/dim/ports/databases/firebird40-client/work/Firebird-4.0.2.2816-0/temp/Release/remote/parser.o /wrkdirs/share/dim/ports/databases/firebird40-client/work/Firebird-4.0.2.2816-0/temp/Release/remote/protocol.o /wrkdirs/share/dim/ports/databases/firebird40-client/work/Firebird-4.0.2.2816-0/temp/Release/remote/remote.o /wrkdirs/share/dim/ports/databases/firebird40-client/work/Firebird-4.0.2.2816-0/temp/Release/auth/SecureRemotePassword/srp.o /wrkdirs/share/dim/ports/databases/firebird40-client/work/Firebird-4.0.2.2816-0/temp/Release/remote/client/BlrFromMessage.o /wrkdirs/share/dim/ports/databases/firebird40-client/work/Firebird-4.0.2.2816-0/temp/Release/remote/client/interface.o /wrkdirs/share/dim/ports/databases/firebird40-client/work/Firebird-4.0.2.2816-0/temp/Release/auth/SecureRemotePassword/client/SrpClient.o /wrkdirs/share/dim/ports/databases/firebird40-client/work/Firebird-4.0.2.2816-0/temp/Release/auth/SecurityDatabase/LegacyClient.o /wrkdirs/share/dim/ports/databases/firebird40-client/work/Firebird-4.0.2.2816-0/temp/Release/plugins/crypt/arc4/Arc4.o /wrkdirs/share/dim/ports/databases/firebird40-client/work/Firebird-4.0.2.2816-0/temp/Release/common.a -L/wrkdirs/share/dim/ports/databases/firebird40-client/work/Firebird-4.0.2.2816-0/gen/Release/firebird/lib  -liconv -lm  -lpthread -ldecFloat -lre2  -ltommath -ltomcrypt
  c++: warning: argument unused during compilation: '-static-libstdc++' [-Wunused-command-line-argument]
  ld: error: version script assignment of 'global' to symbol '_IO_stdin_used' failed: symbol not defined
  c++: error: linker command failed with exit code 1 (use -v to see invocation)

The mentioned symbol is only relevant for Linux. Remove it from the
builds/posix/vers.sh.in script that generates the linker version script.

PR:		274336
Approved by:	maintainer timeout (2 weeks)
MFH:		2023Q4
d93897eed7
Jan Beich (jbeich) · 4.0.2_1
devel/icu: update to 73.1

- Temporarily switch to GitHub auto archive (release artifacts are N/A atm)

Changes:	https://github.com/unicode-org/icu/releases/tag/release-73-1
Reported by:	GitHub (watch releases)
PR:		270422
Exp-run by:	antoine
f1f1a8be88
Piotr Kubaj (pkubaj) · 4.0.2
databases/firebird40-server: fix build on powerpc64le

config.status: error: cannot find input file: `builds/posix/prefix.freebsd_powerpc64el'
75f48516f0
Jose Alonso Cardenas Marquez (acm) · 4.0.2
databases:firebird40-*: Update to 4.0.2

ChangeLog at:	https://firebirdsql.org/file/documentation/release_notes/html/en/4_0/rlsnotes40.html
fb48078990
Jan Beich (jbeich) · 4.0.0_4
devel/icu: update to 72.1

Changes:	https://github.com/unicode-org/icu/releases/tag/release-72-1
Reported by:	GitHub (watch releases)
PR:		266582
Exp-run by:	antoine
dfe25d73e7
Stefan Eßer (se) · 4.0.0_3
Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)
fb16dfecae
Stefan Eßer (se) · 4.0.0_3
Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)
b7f05445c0
Piotr Kubaj (pkubaj) · 4.0.0_3
databases/firebird40-server: port to powerpc64le

Add upstream patch to support powerpc64le.
b8b58884a3
Jan Beich (jbeich) · 4.0.0_3
devel/icu: update to 71.1

Changes:	https://github.com/unicode-org/icu/releases/tag/release-71-1
Reported by:	GitHub (watch releases)
PR:		262654
Exp-run by:	antoine
Approved by:	fluffy
268cee3b02
Stefan Eßer (se) · 4.0.0_2
*/*: Remove redundant '-*' from CONFLICTS definitions

The conflict checks compare the patterns first against the package
names without version (as reported by "pkg query "%n"), then - if
there was no match - agsinst the full package names including the
version (as reported by "pkg query "%n-%v").

Approved by: portmgr (blanket)
04b9da4140
Jan Beich (jbeich) · 4.0.0_2
devel/icu: update to 70.1

Changes:	https://github.com/unicode-org/icu/releases/tag/release-70-1
Reported by:	GitHub (watch releases)
PR:		258794
Exp-run by:	antoine
f34ece3aa6
Bernhard Froehlich (decke) · 4.0.0_1
databases/firebird40-server: Fix CPE information because current one is deprecated

Approved by:    portmgr (blanket)
d404a63c7d
Jose Alonso Cardenas Marquez (acm) · 4.0.0_1
databases/firebird40-client: Fix pkg-plist
2339b1a1ae
Jose Alonso Cardenas Marquez (acm) · 4.0.0
databases/firebird40-[client|server]: Clean up

- Change library version to 4
- Remove obsolete option from CONFIGURE_ARGS
- Fix pkg-plist.client
675e5f2f84
Jose Alonso Cardenas Marquez (acm) · 4.0.0
databases/firebird40-[client|server]: New port: Firebird-4 relational database

Firebird is a relational database offering many ANSI SQL-99 features
that runs on Linux, Windows, and a variety of Unix platforms.  Firebird
offers excellent concurrency, high performance, and powerful language
support for stored procedures and triggers.  It has been used in
production systems, under a variety of names since 1981.

Firebird is completely free of any registration, licensing or deployment
fees.  It may be deployed freely for use with any third-party software,
whether commercial or not.

WWW: https://sourceforge.net/projects/firebird/
WWW: http://www.firebirdsql.org/
dbbc9f821b