Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Hibernate Core update blocks security bypass
published 3 months ago
Summary
The Hibernate libraries, including hibernate-core and related plugins, contain a security weakness that could let attackers bypass protections. TuxCare has released a rebuilt version that fixes the issue. Update all listed Hibernate components to version 5.6.15.Final-tuxcare.3 as soon as possible.
What to do
- Update hibernate org.hibernate.orm.tooling:hibernate-enhance-maven-plugin to version 5.6.15.Final-tuxcare.3.
- Update hibernate org.hibernate:hibernate-agroal to version 5.6.15.Final-tuxcare.3.
- Update hibernate org.hibernate:hibernate-c3p0 to version 5.6.15.Final-tuxcare.3.
- Update hibernate org.hibernate:hibernate-core to version 5.6.15.Final-tuxcare.3.
- Update hibernate org.hibernate:hibernate-core-jakarta to version 5.6.15.Final-tuxcare.3.
- Update hibernate org.hibernate:hibernate-ehcache to version 5.6.15.Final-tuxcare.3.
- Update hibernate org.hibernate:hibernate-entitymanager to version 5.6.15.Final-tuxcare.3.
- Update hibernate org.hibernate:hibernate-envers to version 5.6.15.Final-tuxcare.3.
- Update hibernate org.hibernate:hibernate-envers-jakarta to version 5.6.15.Final-tuxcare.3.
- Update hibernate org.hibernate:hibernate-graalvm to version 5.6.15.Final-tuxcare.3.
- Update hibernate org.hibernate:hibernate-gradle-plugin to version 5.6.15.Final-tuxcare.3.
- Update hibernate org.hibernate:hibernate-hikaricp to version 5.6.15.Final-tuxcare.3.
- Update hibernate org.hibernate:hibernate-infinispan to version 5.6.15.Final-tuxcare.3.
- Update hibernate org.hibernate:hibernate-java8 to version 5.6.15.Final-tuxcare.3.
- Update hibernate org.hibernate:hibernate-jcache to version 5.6.15.Final-tuxcare.3.
- Update hibernate org.hibernate:hibernate-jpamodelgen to version 5.6.15.Final-tuxcare.3.
- Update hibernate org.hibernate:hibernate-jpamodelgen-jakarta to version 5.6.15.Final-tuxcare.3.
- Update hibernate org.hibernate:hibernate-micrometer to version 5.6.15.Final-tuxcare.3.
- Update hibernate org.hibernate:hibernate-osgi to version 5.6.15.Final-tuxcare.3.
- Update hibernate org.hibernate:hibernate-proxool to version 5.6.15.Final-tuxcare.3.
- Update hibernate org.hibernate:hibernate-spatial to version 5.6.15.Final-tuxcare.3.
- Update hibernate org.hibernate:hibernate-testing to version 5.6.15.Final-tuxcare.3.
- Update hibernate org.hibernate:hibernate-testing-jakarta to version 5.6.15.Final-tuxcare.3.
- Update hibernate org.hibernate:hibernate-vibur to version 5.6.15.Final-tuxcare.3.
- Update org.hibernate.orm.tooling:hibernate-enhance-maven-plugin to version 5.6.15.Final-tuxcare.3.
- Update org.hibernate:hibernate-agroal to version 5.6.15.Final-tuxcare.3.
- Update org.hibernate:hibernate-c3p0 to version 5.6.15.Final-tuxcare.3.
- Update org.hibernate:hibernate-core to version 5.6.15.Final-tuxcare.3.
- Update org.hibernate:hibernate-ehcache to version 5.6.15.Final-tuxcare.3.
- Update org.hibernate:hibernate-entitymanager to version 5.6.15.Final-tuxcare.3.
- Update org.hibernate:hibernate-envers to version 5.6.15.Final-tuxcare.3.
- Update org.hibernate:hibernate-gradle-plugin to version 5.6.15.Final-tuxcare.3.
- Update org.hibernate:hibernate-hikaricp to version 5.6.15.Final-tuxcare.3.
- Update org.hibernate:hibernate-java8 to version 5.6.15.Final-tuxcare.3.
- Update org.hibernate:hibernate-jcache to version 5.6.15.Final-tuxcare.3.
- Update org.hibernate:hibernate-micrometer to version 5.6.15.Final-tuxcare.3.
- Update org.hibernate:hibernate-osgi to version 5.6.15.Final-tuxcare.3.
- Update org.hibernate:hibernate-proxool to version 5.6.15.Final-tuxcare.3.
- Update org.hibernate:hibernate-spatial to version 5.6.15.Final-tuxcare.3.
- Update org.hibernate:hibernate-testing to version 5.6.15.Final-tuxcare.3.
- Update org.hibernate:hibernate-vibur to version 5.6.15.Final-tuxcare.3.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:Maven | hibernate | org.hibernate.orm.tooling:hibernate-enhance-maven-plugin |
>= 5.6.15.Final, < 5.6.15.Final-tuxcare.3 Fix: upgrade to 5.6.15.Final-tuxcare.3
|
| TuxCare:Maven | hibernate | org.hibernate:hibernate-agroal |
>= 5.6.15.Final, < 5.6.15.Final-tuxcare.3 Fix: upgrade to 5.6.15.Final-tuxcare.3
|
| TuxCare:Maven | hibernate | org.hibernate:hibernate-c3p0 |
>= 5.6.15.Final, < 5.6.15.Final-tuxcare.3 Fix: upgrade to 5.6.15.Final-tuxcare.3
|
| TuxCare:Maven | hibernate | org.hibernate:hibernate-core |
>= 5.6.15.Final, < 5.6.15.Final-tuxcare.3 Fix: upgrade to 5.6.15.Final-tuxcare.3
|
| TuxCare:Maven | hibernate | org.hibernate:hibernate-core-jakarta |
>= 5.6.15.Final, < 5.6.15.Final-tuxcare.3 Fix: upgrade to 5.6.15.Final-tuxcare.3
|
| TuxCare:Maven | hibernate | org.hibernate:hibernate-ehcache |
>= 5.6.15.Final, < 5.6.15.Final-tuxcare.3 Fix: upgrade to 5.6.15.Final-tuxcare.3
|
| TuxCare:Maven | hibernate | org.hibernate:hibernate-entitymanager |
>= 5.6.15.Final, < 5.6.15.Final-tuxcare.3 Fix: upgrade to 5.6.15.Final-tuxcare.3
|
| TuxCare:Maven | hibernate | org.hibernate:hibernate-envers |
>= 5.6.15.Final, < 5.6.15.Final-tuxcare.3 Fix: upgrade to 5.6.15.Final-tuxcare.3
|
| TuxCare:Maven | hibernate | org.hibernate:hibernate-envers-jakarta |
>= 5.6.15.Final, < 5.6.15.Final-tuxcare.3 Fix: upgrade to 5.6.15.Final-tuxcare.3
|
| TuxCare:Maven | hibernate | org.hibernate:hibernate-graalvm |
>= 5.6.15.Final, < 5.6.15.Final-tuxcare.3 Fix: upgrade to 5.6.15.Final-tuxcare.3
|
| TuxCare:Maven | hibernate | org.hibernate:hibernate-gradle-plugin |
>= 5.6.15.Final, < 5.6.15.Final-tuxcare.3 Fix: upgrade to 5.6.15.Final-tuxcare.3
|
| TuxCare:Maven | hibernate | org.hibernate:hibernate-hikaricp |
>= 5.6.15.Final, < 5.6.15.Final-tuxcare.3 Fix: upgrade to 5.6.15.Final-tuxcare.3
|
| TuxCare:Maven | hibernate | org.hibernate:hibernate-infinispan |
>= 5.6.15.Final, < 5.6.15.Final-tuxcare.3 Fix: upgrade to 5.6.15.Final-tuxcare.3
|
| TuxCare:Maven | hibernate | org.hibernate:hibernate-java8 |
>= 5.6.15.Final, < 5.6.15.Final-tuxcare.3 Fix: upgrade to 5.6.15.Final-tuxcare.3
|
| TuxCare:Maven | hibernate | org.hibernate:hibernate-jcache |
>= 5.6.15.Final, < 5.6.15.Final-tuxcare.3 Fix: upgrade to 5.6.15.Final-tuxcare.3
|
| TuxCare:Maven | hibernate | org.hibernate:hibernate-jpamodelgen |
>= 5.6.15.Final, < 5.6.15.Final-tuxcare.3 Fix: upgrade to 5.6.15.Final-tuxcare.3
|
| TuxCare:Maven | hibernate | org.hibernate:hibernate-jpamodelgen-jakarta |
>= 5.6.15.Final, < 5.6.15.Final-tuxcare.3 Fix: upgrade to 5.6.15.Final-tuxcare.3
|
| TuxCare:Maven | hibernate | org.hibernate:hibernate-micrometer |
>= 5.6.15.Final, < 5.6.15.Final-tuxcare.3 Fix: upgrade to 5.6.15.Final-tuxcare.3
|
| TuxCare:Maven | hibernate | org.hibernate:hibernate-osgi |
>= 5.6.15.Final, < 5.6.15.Final-tuxcare.3 Fix: upgrade to 5.6.15.Final-tuxcare.3
|
| TuxCare:Maven | hibernate | org.hibernate:hibernate-proxool |
>= 5.6.15.Final, < 5.6.15.Final-tuxcare.3 Fix: upgrade to 5.6.15.Final-tuxcare.3
|
| TuxCare:Maven | hibernate | org.hibernate:hibernate-spatial |
>= 5.6.15.Final, < 5.6.15.Final-tuxcare.3 Fix: upgrade to 5.6.15.Final-tuxcare.3
|
| TuxCare:Maven | hibernate | org.hibernate:hibernate-testing |
>= 5.6.15.Final, < 5.6.15.Final-tuxcare.3 Fix: upgrade to 5.6.15.Final-tuxcare.3
|
| TuxCare:Maven | hibernate | org.hibernate:hibernate-testing-jakarta |
>= 5.6.15.Final, < 5.6.15.Final-tuxcare.3 Fix: upgrade to 5.6.15.Final-tuxcare.3
|
| TuxCare:Maven | hibernate | org.hibernate:hibernate-vibur |
>= 5.6.15.Final, < 5.6.15.Final-tuxcare.3 Fix: upgrade to 5.6.15.Final-tuxcare.3
|
| TuxCare:Maven | – | org.hibernate.orm.tooling:hibernate-enhance-maven-plugin |
>= 5.6.15.Final, < 5.6.15.Final-tuxcare.3 Fix: upgrade to 5.6.15.Final-tuxcare.3
|
| TuxCare:Maven | – | org.hibernate:hibernate-agroal |
>= 5.6.15.Final, < 5.6.15.Final-tuxcare.3 Fix: upgrade to 5.6.15.Final-tuxcare.3
|
| TuxCare:Maven | – | org.hibernate:hibernate-c3p0 |
>= 5.6.15.Final, < 5.6.15.Final-tuxcare.3 Fix: upgrade to 5.6.15.Final-tuxcare.3
|
| TuxCare:Maven | – | org.hibernate:hibernate-core |
>= 5.6.15.Final, < 5.6.15.Final-tuxcare.3 Fix: upgrade to 5.6.15.Final-tuxcare.3
|
| TuxCare:Maven | – | org.hibernate:hibernate-ehcache |
>= 5.6.15.Final, < 5.6.15.Final-tuxcare.3 Fix: upgrade to 5.6.15.Final-tuxcare.3
|
| TuxCare:Maven | – | org.hibernate:hibernate-entitymanager |
>= 5.6.15.Final, < 5.6.15.Final-tuxcare.3 Fix: upgrade to 5.6.15.Final-tuxcare.3
|
| TuxCare:Maven | – | org.hibernate:hibernate-envers |
>= 5.6.15.Final, < 5.6.15.Final-tuxcare.3 Fix: upgrade to 5.6.15.Final-tuxcare.3
|
| TuxCare:Maven | – | org.hibernate:hibernate-gradle-plugin |
>= 5.6.15.Final, < 5.6.15.Final-tuxcare.3 Fix: upgrade to 5.6.15.Final-tuxcare.3
|
| TuxCare:Maven | – | org.hibernate:hibernate-hikaricp |
>= 5.6.15.Final, < 5.6.15.Final-tuxcare.3 Fix: upgrade to 5.6.15.Final-tuxcare.3
|
| TuxCare:Maven | – | org.hibernate:hibernate-java8 |
>= 5.6.15.Final, < 5.6.15.Final-tuxcare.3 Fix: upgrade to 5.6.15.Final-tuxcare.3
|
| TuxCare:Maven | – | org.hibernate:hibernate-jcache |
>= 5.6.15.Final, < 5.6.15.Final-tuxcare.3 Fix: upgrade to 5.6.15.Final-tuxcare.3
|
| TuxCare:Maven | – | org.hibernate:hibernate-micrometer |
>= 5.6.15.Final, < 5.6.15.Final-tuxcare.3 Fix: upgrade to 5.6.15.Final-tuxcare.3
|
| TuxCare:Maven | – | org.hibernate:hibernate-osgi |
>= 5.6.15.Final, < 5.6.15.Final-tuxcare.3 Fix: upgrade to 5.6.15.Final-tuxcare.3
|
| TuxCare:Maven | – | org.hibernate:hibernate-proxool |
>= 5.6.15.Final, < 5.6.15.Final-tuxcare.3 Fix: upgrade to 5.6.15.Final-tuxcare.3
|
| TuxCare:Maven | – | org.hibernate:hibernate-spatial |
>= 5.6.15.Final, < 5.6.15.Final-tuxcare.3 Fix: upgrade to 5.6.15.Final-tuxcare.3
|
| TuxCare:Maven | – | org.hibernate:hibernate-testing |
>= 5.6.15.Final, < 5.6.15.Final-tuxcare.3 Fix: upgrade to 5.6.15.Final-tuxcare.3
|
| TuxCare:Maven | – | org.hibernate:hibernate-vibur |
>= 5.6.15.Final, < 5.6.15.Final-tuxcare.3 Fix: upgrade to 5.6.15.Final-tuxcare.3
|
Original advisory text
TuxCare security update for org.hibernate:hibernate-core (1 CVE)
TuxCare rebuilt org.hibernate:hibernate-core to address 1 CVE. Fixed in 5.6.15.Final-tuxcare.3.
Timeline
Published4 Aug 2026
Updated2 Nov 2026
First seen15 Oct 2026
Sources
CLSA-2026-1769731733 · OSV
Track software like this
Free during beta