Since 2026-04-17, the Firebird vulnerability CVE-2026-40342 has been publicly known. To avoid potential risks, we recommend that you uninstall the currently installed Firebird version as soon as possible and switch to the current version.

Please then install the following version: Firebird 5.0.4 for Windows x64 https://www.firebirdsql.org/download-file?file=https://github.com/FirebirdSQL/firebird/releases/download/v5.0.4/Firebird-5.0.4.1812-0-windows-x64.exe

Please note that the PAM database currently still has to be migrated to the new system manually.

Unfortunately, automatic migration is not yet available at this time.

Please perform the migration as follows:

Install Firebird 5.0 using the default settings. Please make a note of the assigned SYSDBA password (referred to below as: mySYSDBA_PASSWORD).

To migrate Firebird 2.5 databases, a running Firebird 2.5 server is temporarily required. For this purpose, please download the portable version of Firebird 2.5 https://www.firebirdsql.org/download-file?file=https://github.com/FirebirdSQL/firebird/releases/download/R2_5_9/Firebird-2.5.9.27139-0_Win32.zip and extract it, for example, to C:\FB25.

Open the file C:\FB25\firebird.conf and change the following line:

#RemoteBindAddress = to RemoteBindAddress = 127.0.0.1

This ensures that the server is only accessible locally.

If Firebird 2.5 was previously installed, please copy the file C:\Program Files(x86)\Firebird\Firebird_2_5\security2.fdb to C:\FB25\security2.fdb.

Open a Power Shell window and execute the following steps:

• cd C:\FB25\bin\
• $env:FIREBIRD=„C:\FB25“
• .\fbserver.exe -a

Open a second Power Shell window and execute the following commands:

• C:\FB25\bin\gbak.exe -backup -user sysdba -password oldMASTERKEY 'c:\FB25\OLD_DATABASE.GDB' temp.txt
• & 'C:\Program Files\Firebird\Firebird_5_0\gbak.exe' -c -v -user sysdba -password mySYSDBA_PASSWORD .\temp.txt 'c:\FB25\NEW_DATABASE.GDB'

The following applies:

• oldMASTERKEY is the SYSDBA password in Firebird 2.5
• mySYSDBA_PASSWORD is the password assigned during the Firebird 5.0 installation
• C:\FB25\OLD_DATABASE.GDB is the existing database in Firebird 2.5 format (for example: C:\Users\Public\Documents\KTP\PAM\Databases\PAM31se.GDB)
• C:\FB25\NEW_DATABASE.GDB is the storage location of the new migrated database (for example: C:\Users\Public\Documents\KTP\PAM\Databases\PAM31se_new_fb5.GDB)

This step can be repeated for multiple databases if required.

After the migration has been completed, please stop the Firebird 2.5 server with the following command: taskkill /im fbserver.exe

Automated migration of the databases is currently not yet possible. Appropriate solutions are currently under development and are expected to be available with version PAM 3.1.2.