You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@jena.apache.org by gi...@apache.org on 2024/02/28 14:28:24 UTC
(jena-site) branch asf-staging updated: Staged site from format-advisories (c2e3b71cba22d86bba6f3d876b13207dc85cb955)
This is an automated email from the ASF dual-hosted git repository.
git-site-role pushed a commit to branch asf-staging
in repository https://gitbox.apache.org/repos/asf/jena-site.git
The following commit(s) were added to refs/heads/asf-staging by this push:
new 2a4a6064c Staged site from format-advisories (c2e3b71cba22d86bba6f3d876b13207dc85cb955)
2a4a6064c is described below
commit 2a4a6064cca000b322a0eac1079c553d5fa4651f
Author: jenkins <bu...@apache.org>
AuthorDate: Wed Feb 28 14:28:21 2024 +0000
Staged site from format-advisories (c2e3b71cba22d86bba6f3d876b13207dc85cb955)
---
content/about_jena/security-advisories.html | 18 ++++++------------
content/index.json | 2 +-
2 files changed, 7 insertions(+), 13 deletions(-)
diff --git a/content/about_jena/security-advisories.html b/content/about_jena/security-advisories.html
index 8781ffc14..f0eb014e9 100644
--- a/content/about_jena/security-advisories.html
+++ b/content/about_jena/security-advisories.html
@@ -173,11 +173,8 @@
<nav id="TableOfContents">
<ul>
<li><a href="#process">Process</a></li>
- <li><a href="#jena-cves">Jena CVEs</a>
- <ul>
- <li><a href="#cves-in-jena-dependencies">CVEs in Jena Dependencies</a></li>
- </ul>
- </li>
+ <li><a href="#jena-cves">Jena CVEs</a></li>
+ <li><a href="#dependencies">Dependencies</a></li>
</ul>
</nav>
</aside>
@@ -250,7 +247,7 @@ arbitrary code execution. Therefore, it is recommended that this feature remain
disabled for any publicly accessible deployment that utilises the ARQ query
engine.</p>
<p>Users should upgrade to latest Jena 4.x <a href="../download/">release</a> available.</p>
-<p><strong>CVE-2022-45136 - JDBC Serialisation in Apache Jena SD</strong></p>
+<p><strong>CVE-2022-45136 - JDBC Serialisation in Apache Jena SDB</strong></p>
<p><a href="https://www.cve.org/CVERecord?id=CVE-2022-45136">CVE-2022-45136</a> affects all
versions of <a href="../documentation/archive/sdb/">Jena SDB</a> up to and including the
final <code>3.17.0</code> release.</p>
@@ -272,7 +269,7 @@ parsing up to and including the Jena <code>4.1.0</code> release.</p>
<p><a href="https://www.cve.org/CVERecord?id=CVE-2021-33192">CVE-2021-33192</a> affected
<a href="../documentation/fuseki2/">Fuseki</a> versions <code>2.0.0</code> through <code>4.0.0</code>.</p>
<p>Users should upgrade to latest Jena 4.x <a href="../download/">release</a> available.</p>
-<h3 id="cves-in-jena-dependencies">CVEs in Jena Dependencies</h3>
+<h2 id="dependencies">Dependencies</h2>
<p>The following advisories are CVEs in Jena’s dependencies that may affect users
of Jena, as with Jena specific CVEs our standard <a href="#security-issue-policy">Security Issue
Policy</a> applies and any necessary dependency updates,
@@ -297,11 +294,8 @@ and our command line tools.</p>
<nav id="TableOfContents">
<ul>
<li><a href="#process">Process</a></li>
- <li><a href="#jena-cves">Jena CVEs</a>
- <ul>
- <li><a href="#cves-in-jena-dependencies">CVEs in Jena Dependencies</a></li>
- </ul>
- </li>
+ <li><a href="#jena-cves">Jena CVEs</a></li>
+ <li><a href="#dependencies">Dependencies</a></li>
</ul>
</nav>
</aside>
diff --git a/content/index.json b/content/index.json
index eba17002a..d2d298c50 100644
--- a/content/index.json
+++ b/content/index.json
@@ -1 +1 @@
-[{"categories":null,"contents":"This page is historical \u0026ldquo;for information only\u0026rdquo; - there is no Apache release of Eyeball and the code has not been updated for Jena3.\nThe original source code is available. So you\u0026rsquo;ve got Eyeball installed and you\u0026rsquo;ve run it on one of your files, and Eyeball doesn\u0026rsquo;t like it. You\u0026rsquo;re not sure why, or what to do about it. Here\u0026rsquo;s what\u0026rsquo;s going on.\nEyeball inspects your model a [...]
\ No newline at end of file
+[{"categories":null,"contents":"This page is historical \u0026ldquo;for information only\u0026rdquo; - there is no Apache release of Eyeball and the code has not been updated for Jena3.\nThe original source code is available. So you\u0026rsquo;ve got Eyeball installed and you\u0026rsquo;ve run it on one of your files, and Eyeball doesn\u0026rsquo;t like it. You\u0026rsquo;re not sure why, or what to do about it. Here\u0026rsquo;s what\u0026rsquo;s going on.\nEyeball inspects your model a [...]
\ No newline at end of file