You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@security.apache.org by pk...@apache.org on 2026/09/23 08:53:23 UTC
(security-site) branch systemds-security-model created (now 3907a54f)
This is an automated email from the ASF dual-hosted git repository.
ppkarwasz pushed a change to branch systemds-security-model
in repository https://gitbox.apache.org/repos/asf/security-site.git
at 3907a54f Regenerate pages with the Apache SystemDS security model
This branch includes the following new commits:
new 05447057 Register the Apache SystemDS security model
new 3907a54f Regenerate pages with the Apache SystemDS security model
The 2 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
(security-site) 01/02: Register the Apache SystemDS security model
Posted by pk...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
ppkarwasz pushed a commit to branch systemds-security-model
in repository https://gitbox.apache.org/repos/asf/security-site.git
commit 05447057478ee8ca9fe6c31fc20208afeadfb702
Author: Piotr P. Karwasz <pi...@github.copernik.eu>
AuthorDate: Wed Sep 23 10:53:12 2026 +0200
Register the Apache SystemDS security model
Apache SystemDS has published a security model on its project site, with
the source document kept in the repository's docs/site/security.md.
Assisted-By: Claude Fable 5.1 <no...@anthropic.com>
---
scripts/project-coordinates.json | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/scripts/project-coordinates.json b/scripts/project-coordinates.json
index 163e02ac..1505e413 100644
--- a/scripts/project-coordinates.json
+++ b/scripts/project-coordinates.json
@@ -1871,8 +1871,8 @@
},
"systemds": {
"name": "Apache SystemDS",
- "security_model_link": null,
- "security_model_source": null,
+ "security_model_link": "https://apache.github.io/systemds/site/security.html",
+ "security_model_source": "https://raw.githubusercontent.com/apache/systemds/refs/heads/main/docs/site/security.md",
"advisory_link": null,
"contact": "security@apache.org",
"logo_link": null
(security-site) 02/02: Regenerate pages with the Apache SystemDS security model
Posted by pk...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
ppkarwasz pushed a commit to branch systemds-security-model
in repository https://gitbox.apache.org/repos/asf/security-site.git
commit 3907a54f8cc8252f46096199e0b0e0187cf52d40
Author: Piotr P. Karwasz <pi...@github.copernik.eu>
AuthorDate: Wed Sep 23 10:53:12 2026 +0200
Regenerate pages with the Apache SystemDS security model
Assisted-By: Claude Fable 5.1 <no...@anthropic.com>
---
content/projects/_index.md | 2 ++
content/projects/systemds/_index.md | 7 ++++++-
2 files changed, 8 insertions(+), 1 deletion(-)
diff --git a/content/projects/_index.md b/content/projects/_index.md
index b2d68e8d..0704f4d3 100644
--- a/content/projects/_index.md
+++ b/content/projects/_index.md
@@ -1423,6 +1423,8 @@ Use the tabs below to jump to projects by their initial. Every project lists a s
[security@apache.org](mailto:security@apache.org?subject=SystemDS)
- Advisories (experimental):\
[security.apache.org](/projects/systemds/)
+ - Security model:
+ - [Apache SystemDS security model](https://apache.github.io/systemds/site/security.html)
</section>
<section class="project-tab-panel" role="tabpanel" data-letter="T">
diff --git a/content/projects/systemds/_index.md b/content/projects/systemds/_index.md
index ec8056c0..56c5e1d8 100644
--- a/content/projects/systemds/_index.md
+++ b/content/projects/systemds/_index.md
@@ -8,9 +8,14 @@ layout: single
Do you want disclose a potential security issue for Apache SystemDS? Send your report to the [Apache Security Team](mailto:security@apache.org?subject=SystemDS).
+You can read more about the security policy on:
+
+- [Apache SystemDS security model](https://apache.github.io/systemds/site/security.html)
+
+
# Advisories
-This section is experimental: it provides advisories since 2023 and may lag behind the official CVE publications. If you have any feedback on how you would like this data to be provided, you are welcome to reach out on our public [mailinglist](/mailinglist) or privately on [security@apache.org](mailto:security@apache.org)
+This section is experimental: it provides advisories since 2023 and may lag behind the official CVE publications. It may also lack details found on the project security page linked above. If you have any feedback on how you would like this data to be provided, you are welcome to reach out on our public [mailinglist](/mailinglist) or privately on [security@apache.org](mailto:security@apache.org)
{.bg-warning}
## Denial of service in readExternal method ## { #CVE-2022-26477 }