You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@jena.apache.org by an...@apache.org on 2026/08/03 15:14:17 UTC
(jena-site) branch advisory created (now 4bf1e20dc)
This is an automated email from the ASF dual-hosted git repository.
afs pushed a change to branch advisory
in repository https://gitbox.apache.org/repos/asf/jena-site.git
at 4bf1e20dc Include editor backup files in .gitignore
This branch includes the following new commits:
new 59cf0d2e6 Update advisories.md
new 4bf1e20dc Include editor backup files in .gitignore
The 2 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
(jena-site) 01/02: Update advisories.md
Posted by an...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
afs pushed a commit to branch advisory
in repository https://gitbox.apache.org/repos/asf/jena-site.git
commit 59cf0d2e6ebb571bf7822c01b67045ea9fc43ca6
Author: Andy Seaborne <an...@apache.org>
AuthorDate: Tue Jul 28 19:01:56 2026 +0100
Update advisories.md
---
source/security/advisories.md | 11 +++++++++++
1 file changed, 11 insertions(+)
diff --git a/source/security/advisories.md b/source/security/advisories.md
index 95f4a0c1e..bdc7cb218 100644
--- a/source/security/advisories.md
+++ b/source/security/advisories.md
@@ -14,6 +14,17 @@ the latest Jena release available.
Please refer to the individual CVE links for further details and mitigations.
+**CVE-2026-61372 Web requests using SPARQL Update can escape file restrictions**
+
+[CVE-2026-61372](https://www.cve.org/CVERecord?id=CVE-20-613372) affects Jena
+up to version 6.1.0.
+
+URL references to local resources in SPARQL Update requests were not being
+correctly restricted, and could include access to data on the local machine.
+
+Users are recommended to upgrade to version 6.2.0 where such URLs are restricted
+to be HTTP or FTP URLs.
+
**CVE-2025-50151 - Configuration files uploaded by administrative users are not checked properly**
[CVE-2025-50151](https://www.cve.org/CVERecord?id=CVE-2025-50151) affects Jena
(jena-site) 02/02: Include editor backup files in .gitignore
Posted by an...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
afs pushed a commit to branch advisory
in repository https://gitbox.apache.org/repos/asf/jena-site.git
commit 4bf1e20dc447851c22d38d7ad767b7410cfb0c51
Author: Andy Seaborne <an...@apache.org>
AuthorDate: Tue Jul 28 19:02:28 2026 +0100
Include editor backup files in .gitignore
---
.gitignore | 7 +++++--
1 file changed, 5 insertions(+), 2 deletions(-)
diff --git a/.gitignore b/.gitignore
index 2495e8f93..c4b069728 100644
--- a/.gitignore
+++ b/.gitignore
@@ -2,9 +2,12 @@
/resources
target/
+
+## Editors
.vscode
.#*
-.hugo*
+\#*
+*~
# IntelliJ generated
*.iml
@@ -12,4 +15,4 @@ target/
.java-version
# Hugo
-.hugo_build.lock
+.hugo*