You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@jena.apache.org by "afs (via GitHub)" <gi...@apache.org> on 2025/06/30 16:24:13 UTC
[I] Improve handling of database update requests to Fuseki [jena]
afs opened a new issue, #3288:
URL: https://github.com/apache/jena/issues/3288
Operation `/$/datasets` should be more consistent in its error checking and also provide better error responses.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@jena.apache.org.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@jena.apache.org
For additional commands, e-mail: issues-help@jena.apache.org
Re: [I] Improve handling of database update requests to Fuseki [jena]
Posted by "feilimb (via GitHub)" <gi...@apache.org>.
feilimb commented on issue #3288:
URL: https://github.com/apache/jena/issues/3288#issuecomment-3159737652
Thanks Andy, sorry just for clarity - which exact project(s) do the above CVE relate to, I assume just _jena-fuseki2_ ? (I'm just double checking as we also use _jena-arq_ and _jena-core_).
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@jena.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@jena.apache.org
For additional commands, e-mail: issues-help@jena.apache.org
Re: [I] Improve handling of database update requests to Fuseki [jena]
Posted by "afs (via GitHub)" <gi...@apache.org>.
afs commented on issue #3288:
URL: https://github.com/apache/jena/issues/3288#issuecomment-3159727081
The CVE do not affect `jena-iri`.
By the way, `jena-iri` is going to be replaced by `jena-iri3986`.
Jena has abstraction `IRIx` that makes the choice of IRI provider transprent. If you are using `jena-iri` directly and not other jena dependencies, you may wish to look at the source for package `org.apache.jena.irix` in `jena-core`.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@jena.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@jena.apache.org
For additional commands, e-mail: issues-help@jena.apache.org
Re: [I] Improve handling of database update requests to Fuseki [jena]
Posted by "afs (via GitHub)" <gi...@apache.org>.
afs commented on issue #3288:
URL: https://github.com/apache/jena/issues/3288#issuecomment-3160213314
The jars are `jena-fuseki-*` and the `apache-jena-fuseki download` under the `jena-fuseki2` directory in the source tree.
*jena-arq* and *jena-core* use *jena-iri* via IRIx.
https://jena.apache.org/security/advisories.html
> 5.2.0
The current version is 5.5.0.
ARQ does not depend on jena-fuseki-*
```
org.apache.jena:jena-arq
+- org.apache.jena:jena-core
| +- org.apache.jena:jena-base
| +- org.apache.jena:jena-iri3986
| +- org.apache.jena:jena-iri
| +- org.apache.jena:jena-langtag
```
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@jena.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@jena.apache.org
For additional commands, e-mail: issues-help@jena.apache.org
Re: [I] Improve handling of database update requests to Fuseki [jena]
Posted by "afs (via GitHub)" <gi...@apache.org>.
afs closed issue #3288: Improve handling of database update requests to Fuseki
URL: https://github.com/apache/jena/issues/3288
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@jena.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@jena.apache.org
For additional commands, e-mail: issues-help@jena.apache.org
Re: [I] Improve handling of database update requests to Fuseki [jena]
Posted by "feilimb (via GitHub)" <gi...@apache.org>.
feilimb commented on issue #3288:
URL: https://github.com/apache/jena/issues/3288#issuecomment-3159293411
Can I ask: was this issue related to either of the following CVE's:
CVE-2025-50151, CVE-2025-49656
A project I work on, identified the CVEs above as being present, due to our inclusion of _jena-iri_ 5.2.0, by the OWASP scanner. I suspect however, that the above CVEs only affected the _jena-fuseki_ project.
When the CVE issue is reported, would it be possible to include which specific jena project(s) is/are affected, as otherwise the vulnerability scanners out there simply see the word 'jena' and it is difficult to determine the sub-project which the CVE relates to.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@jena.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@jena.apache.org
For additional commands, e-mail: issues-help@jena.apache.org