[firebird] [DSA-1529-1] Debian recommends upgrade to firebird2, support for firebird1.5 discontinued

[disabled.user]

References:
DSA-1529-1 (http://www.debian.org/security/2008/dsa-1529)

Quoting:
"Multiple security problems have been discovered in the Firebird database, which may lead to the execution of arbitrary code or denial of service.

This Debian security advisory is a bit unusual. While it's normally our strict policy to backport security bugfixes to older releases, this turned out to be infeasible for Firebird 1.5 due to large infrastructural changes necessary to fix these issues. As a consequence security support for Firebird 1.5 is hereby discontinued, leaving two options to administrators running a Firebird database:

1. Administrators running Firebird in a completely internal setup with trusted users could leave it unchanged.
2. Everyone else should upgrade to the firebird2.0 packages available at backports.org.

      Version 2.0.3.12981.ds1-6~bpo40+1 fixes all known issues.

Please refer to the general backports.org documentation to add the packages to your package management configuration.

These packages are backported to run with Debian stable. Since firebird2.0 is not a drop-in replacement for firebird2 (which is the source package name for the Firebird 1.5 packages) these updates are not released through security.debian.org. Potential future security problems affecting Debian stable will be released through backports.org as well.

Arrangements have been made to ensure that Firebird in the upcoming Debian 5.0 release will be supportable with regular backported security bugfixes again."

[disabled.user (disabled.user-deactivatedaccount)]

See also:
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=362001
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=432753
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=444976
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=441405
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=460048
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=463596

[Popa Adrian Marius (mapopa)]

i guess the sane way is to prepare an firebird2.0 for proposed or backports
then move it to main ? what is the strategy ?

[Popa Adrian Marius (mapopa)]

I will add 2.1 and 2.0 to backports

firebird 2.1 is already tested on all ubuntu suported versions just needs to included in backports
https://edge.launchpad.net/~mapopa/+archive

I will start the backports process

[Jamie Strandboge (jdstrand)]

Thank you for reporting this bug to Ubuntu. This bug was reported
against a release of Ubuntu which has reached EOL (End of Life) and
is therefore no longer supported. As a result, this bug is being marked
"Won't Fix". Please see https://wiki.ubuntu.com/Releases for currently
supported Ubuntu releases.

Please feel free to report any other bugs you may find.