Register | Log in

openjpa

Choose email to subscribe with

general

source: openjpa (source, java)
version: 2.4.2-1
maintainer: Debian Java Maintainers (archive) [DMD]
uploaders: Miguel Landaeta [DMD] – Stephen Nelson [DMD]
arch: all
std-ver: 4.0.0
VCS: Git (Browse)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-stable: 2.0.1-1
oldstable: 2.2.2-1
stable: 2.4.0-4
testing: 2.4.2-1
unstable: 2.4.2-1

versioned links

2.0.1-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
2.2.2-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
2.4.0-4: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
2.4.2-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

libopenjpa-java
libopenjpa-java-doc

action needed

Does not build reproducibly during testing

normal

A package building reproducibly enables third parties to verify that the source matches the distributed binaries. It has been identified that this source package produced different results, failed to build or had other issues in a test environment. Please read about how to improve the situation!

Created: 2016-04-06 Last update: 2017-07-21 13:33

Multiarch hinter reports 1 issue(s)

low

There are issues with the multiarch metadata for this package.

libopenjpa-java-doc could be marked Multi-Arch: foreign

Created: 2017-06-24 Last update: 2017-07-21 13:34

1 ignored security issue in wheezy

low

There is 1 open security issue in wheezy.

1 issue skipped by the security teams:

CVE-2013-1768: The BrokerFactory functionality in Apache OpenJPA 1.x before 1.2.3 and 2.x before 2.2.2 creates local executable JSP files containing logging trace data produced during deserialization of certain crafted OpenJPA objects, which makes it easier for remote attackers to execute arbitrary code by creating a serialized object and leveraging improperly secured server programs.

Please fix it.

Created: 2015-07-12 Last update: 2017-06-28 07:24

news

[2017-06-29] openjpa 2.4.2-1 MIGRATED to testing (Debian testing watch)
[2017-06-23] Accepted openjpa 2.4.2-1 (source) into unstable (Markus Koschany)
[2017-02-03] openjpa 2.4.0-4 MIGRATED to testing (Debian testing watch)
[2017-01-23] Accepted openjpa 2.4.0-4 (source) into unstable (Markus Koschany)
[2016-07-21] openjpa 2.4.0-3 MIGRATED to testing (Debian testing watch)
[2016-07-15] Accepted openjpa 2.4.0-3 (source all) into unstable (Markus Koschany)
[2015-09-03] openjpa 2.4.0-2 MIGRATED to testing (Britney)
[2015-08-28] Accepted openjpa 2.4.0-2 (source all) into unstable (Emmanuel Bourg)
[2015-05-29] Accepted openjpa 2.4.0-1 (source all) into unstable (Emmanuel Bourg)
[2013-10-19] openjpa 2.2.2-1 MIGRATED to testing (Debian testing watch)
[2013-10-09] Accepted openjpa 2.2.2-1 (source all) (Miguel Landaeta)
[2013-07-08] openjpa REMOVED from testing (Debian testing watch)
[2012-07-06] openjpa 2.0.1-1 MIGRATED to testing (Debian testing watch)
[2012-06-26] Accepted openjpa 2.0.1-1 (source all) (Miguel Landaeta) (signed by: tony mancill)
[2011-10-31] openjpa 2.0.0-1 MIGRATED to testing (Debian testing watch)
[2011-08-09] openjpa REMOVED from testing (Debian testing watch)
[2010-06-22] openjpa 2.0.0-1 MIGRATED to testing (Debian testing watch)
[2010-06-11] Accepted openjpa 2.0.0-1 (source all) (Miguel Landaeta) (signed by: Torsten Werner)

links

homepage
lintian
buildd: logs, checks, clang, reproducibility
popcon
browse source code
edit tags
security tracker

ubuntu

[Information about Ubuntu for Debian Developers]

version: 2.4.2-1

Debian Package Tracker — Copyright 2013-2016 The Distro Tracker Developers

Report problems to the tracker.debian.org pseudo-package in the Debian BTS.

Documentation — Git Repository — How to contribute