advisories/20324.adv

type: security
subject: Updated firebird packages fix security vulnerability
src:
  5:
   core:
     - firebird-2.5.3.26778-4.1.mga5
description: |
  A serious security problem existed with the access to undesired external
  modules, even if 'Restrict' configuration mode was specified for UdfAccess
  (CORE-5474).
references:
 - https://bugs.mageia.org/show_bug.cgi?id=20324
 - https://sourceforge.net/p/firebird/mailman/message/35666077/
 - http://tracker.firebirdsql.org/browse/CORE-5474
 - https://lists.opensuse.org/opensuse-updates/2017-02/msg00093.html
ID: MGASA-2017-0068
1	type: security
2	subject: Updated firebird packages fix security vulnerability
3	src:
4	5:
5	core:
6	- firebird-2.5.3.26778-4.1.mga5
7	description: \|
8	A serious security problem existed with the access to undesired external
9	modules, even if 'Restrict' configuration mode was specified for UdfAccess
10	(CORE-5474).
11	references:
12	- https://bugs.mageia.org/show_bug.cgi?id=20324
13	- https://sourceforge.net/p/firebird/mailman/message/35666077/
14	- http://tracker.firebirdsql.org/browse/CORE-5474
15	- https://lists.opensuse.org/opensuse-updates/2017-02/msg00093.html
16	ID: MGASA-2017-0068