This update for firebird fixes the following issues:
* CVE-2017-11509: authenticated remote code execution via the definition
external functions that don't match the original definition of the entry
point (bsc#1087421).
## Patch Instructions:
To install this SUSE update use the SUSE recommended installation methods like
YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
* openSUSE Leap 15.6
zypper in -t patch openSUSE-SLE-15.6-2025-3095=1
* SUSE Package Hub 15 15-SP6
zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2025-3095=1
* SUSE Package Hub 15 15-SP7
zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP7-2025-3095=1
* openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64)
* firebird-utils-debuginfo-3.0.4.33054-150200.3.6.1
* firebird-debugsource-3.0.4.33054-150200.3.6.1
* firebird-examples-3.0.4.33054-150200.3.6.1
* libfbclient2-3.0.4.33054-150200.3.6.1
* libib_util-debuginfo-3.0.4.33054-150200.3.6.1
* firebird-server-3.0.4.33054-150200.3.6.1
* libib_util-3.0.4.33054-150200.3.6.1
* libfbclient-devel-3.0.4.33054-150200.3.6.1
* firebird-3.0.4.33054-150200.3.6.1
* firebird-debuginfo-3.0.4.33054-150200.3.6.1
* firebird-utils-3.0.4.33054-150200.3.6.1
* firebird-server-debuginfo-3.0.4.33054-150200.3.6.1
* libib_util-devel-3.0.4.33054-150200.3.6.1
* libfbclient2-debuginfo-3.0.4.33054-150200.3.6.1
* openSUSE Leap 15.6 (noarch)
* firebird-doc-3.0.4.33054-150200.3.6.1
* openSUSE Leap 15.6 (x86_64)
* libib_util-32bit-3.0.4.33054-150200.3.6.1
* libfbclient2-32bit-3.0.4.33054-150200.3.6.1
* libfbclient2-32bit-debuginfo-3.0.4.33054-150200.3.6.1
* libib_util-32bit-debuginfo-3.0.4.33054-150200.3.6.1
* SUSE Package Hub 15 15-SP6 (aarch64...
Read the Full Advisory* bsc#1087421
## References:
* https://www.suse.com/security/cve/CVE-2017-11509.html
* https://bugzilla.suse.com/show_bug.cgi?id=1087421
Get the latest Linux and open source security news straight to your inbox.