#1143599 apache-jena: CVE-2026-61372

Package:
src:apache-jena
Source:
src:apache-jena
Submitter:
Salvatore Bonaccorso
Date:
2026-08-04 17:47:02 UTC
Severity:
normal
Tags:
#1143599#5
Date:
2026-08-04 17:45:57 UTC
From:
To:
Hi,

The following vulnerability was published for apache-jena.

CVE-2026-61372[0]:
| Improper Limitation of a Pathname to a Restricted Directory ('Path
| Traversal') vulnerability in Apache Jena Fuseki.  This issue affects
| Apache Jena Fuseki: through 6.1.0.  Users are recommended to upgrade
| to version 6.2.0, which fixes the issue.


If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2026-61372
https://www.cve.org/CVERecord?id=CVE-2026-61372
[1] https://lists.apache.org/thread/h206tpxtbzts7m254og6ffqljjdjkm84

Please adjust the affected versions in the BTS as needed.

Regards,
Salvatore