The Apache Jena development community is pleased to
announce the release of Apache Jena 4.3.1.
This release updates the version of log4j2 used in Fuseki.
Fuseki users should upgrade as soon as possible.
Uses of Jena libraries should to check their application logging
dependences and update a
See email
https://lists.apache.org/thread/nc3gz7yvokc9ktkzs8078jr5t04nfmdy
and it includes ways to workaround it.
up-to-date java
Java 8u121 // Java 11.0.1
(stops any code injection)
Set system property
"-Dlog4j2.formatMsgNoLookups=true"
(stops interpretation of malicious log messages)
http
Hi.
I see the most recent Fuseki code on GitHub is using log4j 2.15. Do you
know which older version might be affected?
Thanks,
Piotr
and as you have mentioned earlier GeoSPARQL 1.0 is 2D. If we go beyond that
(and we should at some point) we will have to indicate that in the
references.
For now GeoSPARQL 1.0 is the point of reference for the Apache Jena
GeoSPARQL implementation.
On Mon, Dec 13, 2021 at 12:30 PM Marco Neumann
OK yes I see, thank you for the findings. That would explain the situation.
I will take a look at geo:coordinateDimension. So I think what we would
like to avoid is a situation where higher level dimensions are quietly
skipped altogether. Even though using x, y access methods on higher level
dimen
Ah, okay. That link is to the 11-52r3 version while I believe the final
version is 11-52r4. In the later draft, Req 12 became Req 9 and the
'is3D' was removed.
I've found the OGC website can be a bit hit and miss about indicating
what are latest and deprecated versions.
https://www.ogc.org/standa
