• Bug#1110262: apache-jena: CVE-2025-49656

    From Salvatore Bonaccorso@21:1/5 to All on Sat Aug 2 13:10:01 2025
    Source: apache-jena
    Version: 4.9.0-1
    Severity: important
    Tags: security upstream
    X-Debbugs-Cc: [email protected], Debian Security Team <[email protected]>

    Hi,

    The following vulnerability was published for apache-jena.

    CVE-2025-49656[0]:
    | Users with administrator access can create databases files outside
    | the files area of the Fuseki server. This issue affects Apache Jena
    | version up to 5.4.0. Users are recommended to upgrade to version
    | 5.5.0, which fixes the issue.


    If you fix the vulnerability please also make sure to include the
    CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

    For further information see:

    [0] https://security-tracker.debian.org/tracker/CVE-2025-49656
    https://www.cve.org/CVERecord?id=CVE-2025-49656
    [1] https://lists.apache.org/thread/qmm21som8zct813vx6dfd1phnfro6mwq

    Please adjust the affected versions in the BTS as needed.

    Regards,
    Salvatore

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)