Source: apache-jena
Version: 4.9.0-1
Severity: important
Tags: security upstream
X-Debbugs-Cc: [email protected], Debian Security Team <[email protected]>
Hi,
The following vulnerability was published for apache-jena.
CVE-2026-61372[0]:
| Improper Limitation of a Pathname to a Restricted Directory ('Path
| Traversal') vulnerability in Apache Jena Fuseki. This issue affects
| Apache Jena Fuseki: through 6.1.0. Users are recommended to upgrade
| to version 6.2.0, which fixes the issue.
If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.
For further information see:
[0] https://security-tracker.debian.org/tracker/CVE-2026-61372
https://www.cve.org/CVERecord?id=CVE-2026-61372
[1] https://lists.apache.org/thread/h206tpxtbzts7m254og6ffqljjdjkm84
Please adjust the affected versions in the BTS as needed.
Regards,
Salvatore
__
This is the maintainer address of Debian's Java team
<https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/pkg-java-maintainers>.
Please use
[email protected] for discussions and questions.
