Updated openjpa packages fix CVE-2013-1768

🗓️ 05 Oct 2013 17:44:58Reported by Gentoo FoundationType

mageia

mageia🔗 advisories.mageia.org👁 35 Views

Updated openjpa packages fix security vulnerability CVE-2013-176

Reporter	Title	Published	Views	Family All 47
IBM Security Bulletins	Security Bulletin: Potential security vulnerability in WebSphere Application Server CVE-2013-1768 PM86780	26 Sep 202205:45	–	ibm
IBM Security Bulletins	Security Bulletin: Potential Security Vulnerabilities fixed in IBM WebSphere Application Server 6.1.0.47	25 Sep 202221:06	–	ibm
IBM Security Bulletins	WebSphere Application Server and IBM HTTP Server Security Bulletin List	13 Jul 202218:04	–	ibm
IBM Security Bulletins	Security Bulletin: Potential Security Vulnerabilities fixed in IBM WebSphere Application Server 7.0.0.29	26 Sep 202205:45	–	ibm
IBM Security Bulletins	Security Bulletin: OpenJPA as used in IBM QRadar SIEM is vulnerable to remote code execution. (CVE-2013-1768)	6 Feb 201921:55	–	ibm
IBM Security Bulletins	Security Bulletin: Potential Security Vulnerabilities fixed in IBM WebSphere Application Server 8.0.0.7	25 Sep 202221:06	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in Java and Node.js packages affect IBM Voice Gateway	11 Jan 202318:41	–	ibm
IBM Security Bulletins	Security Bulletin: Potential Security Vulnerabilities fixed in IBM WebSphere Application Server 8.5.5	25 Sep 202222:39	–	ibm
CVE	CVE-2013-1768	11 Jul 201322:00	–	cve
Cvelist	CVE-2013-1768	11 Jul 201322:00	–	cvelist

OS	OS Version	Architecture	Package	Package Version	Filename
Mageia	2	any	openjpa	2.0.0-1.1	openjpa-2.0.0-1.1.noarch.rpm
Mageia	3	any	openjpa	2.2.0-3.1	openjpa-2.2.0-3.1.noarch.rpm

Source	Link
lists	www.lists.fedoraproject.org/pipermail/package-announce/2013-July/112029.html
bugs	www.bugs.mageia.org/show_bug.cgi

05 Oct 2013 17:44Current

3.9Low risk

Vulners AI Score3.9

CVSS 27.5

EPSS0.14602

openjpa security vulnerability apache openjpa arbitrary code serialized object server programs cve-2013-1768