You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@jena.apache.org by an...@apache.org on 2026/08/03 16:02:48 UTC
(jena-site) branch main updated (006f418f9 -> a77a5233b)
This is an automated email from the ASF dual-hosted git repository.
afs pushed a change to branch main
in repository https://gitbox.apache.org/repos/asf/jena-site.git
from 006f418f9 Download links for Jena 6.2.0
new 1062b474b Update advisories.md
new a77a5233b Include editor backup files in .gitignore
The 2 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
Summary of changes:
.gitignore | 7 +++++--
source/security/advisories.md | 11 +++++++++++
2 files changed, 16 insertions(+), 2 deletions(-)
(jena-site) 01/02: Update advisories.md
Posted by an...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
afs pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/jena-site.git
commit 1062b474be1d0412b8d7374cdd924f7abfa8d3da
Author: Andy Seaborne <an...@apache.org>
AuthorDate: Tue Jul 28 19:01:56 2026 +0100
Update advisories.md
---
source/security/advisories.md | 11 +++++++++++
1 file changed, 11 insertions(+)
diff --git a/source/security/advisories.md b/source/security/advisories.md
index 95f4a0c1e..bdc7cb218 100644
--- a/source/security/advisories.md
+++ b/source/security/advisories.md
@@ -14,6 +14,17 @@ the latest Jena release available.
Please refer to the individual CVE links for further details and mitigations.
+**CVE-2026-61372 Web requests using SPARQL Update can escape file restrictions**
+
+[CVE-2026-61372](https://www.cve.org/CVERecord?id=CVE-20-613372) affects Jena
+up to version 6.1.0.
+
+URL references to local resources in SPARQL Update requests were not being
+correctly restricted, and could include access to data on the local machine.
+
+Users are recommended to upgrade to version 6.2.0 where such URLs are restricted
+to be HTTP or FTP URLs.
+
**CVE-2025-50151 - Configuration files uploaded by administrative users are not checked properly**
[CVE-2025-50151](https://www.cve.org/CVERecord?id=CVE-2025-50151) affects Jena
(jena-site) 02/02: Include editor backup files in .gitignore
Posted by an...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
afs pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/jena-site.git
commit a77a5233be603cc8a71931ecc15d8190f8ba213a
Author: Andy Seaborne <an...@apache.org>
AuthorDate: Tue Jul 28 19:02:28 2026 +0100
Include editor backup files in .gitignore
---
.gitignore | 7 +++++--
1 file changed, 5 insertions(+), 2 deletions(-)
diff --git a/.gitignore b/.gitignore
index 2495e8f93..c4b069728 100644
--- a/.gitignore
+++ b/.gitignore
@@ -2,9 +2,12 @@
/resources
target/
+
+## Editors
.vscode
.#*
-.hugo*
+\#*
+*~
# IntelliJ generated
*.iml
@@ -12,4 +15,4 @@ target/
.java-version
# Hugo
-.hugo_build.lock
+.hugo*