USN-6845-1: Hibernate vulnerability
24 June 2024
Hibernate could be made to expose sensitive information.
Releases
Packages
- libhibernate3-java - Relational Persistence for Idiomatic Java
Details
It was discovered that Hibernate incorrectly handled certain inputs with
unsanitized literals. If a user or an automated system were tricked into
opening a specially crafted input file, a remote attacker could possibly use
this issue to obtain sensitive information.
Update instructions
The problem can be corrected by updating your system to the following package versions:
Ubuntu 20.04
Ubuntu 18.04
-
libhibernate3-java
-
3.6.10.Final-9ubuntu0.18.04.1~esm1
Available with Ubuntu Pro
Ubuntu 16.04
-
libhibernate3-java
-
3.6.10.Final-4ubuntu0.1~esm1
Available with Ubuntu Pro
In general, a standard system update will make all the necessary changes.