[
https://issues.apache.org/jira/browse/AMQ-7357?focusedWorklogId=376086&page=com.atlassian.jira.plugin.system.issuetabpanels:worklog-tabpanel#worklog-376086
]
ASF GitHub Bot logged work on AMQ-7357:
---------------------------------------
Author: ASF GitHub Bot
Created on: 23/Jan/20 07:02
Start Date: 23/Jan/20 07:02
Worklog Time Spent: 10m
Work Description: jbonofre commented on issue #425: AMQ-7357 - Update Pax
URL
URL: https://github.com/apache/activemq/pull/425#issuecomment-577533254
For the record (and next time ;) ), it would be great to set the target
version in the commit comment.
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
[email protected]
Issue Time Tracking
-------------------
Worklog Id: (was: 376086)
Time Spent: 20m (was: 10m)
> Update Pax URL
> --------------
>
> Key: AMQ-7357
> URL: https://issues.apache.org/jira/browse/AMQ-7357
> Project: ActiveMQ
> Issue Type: Bug
> Components: Broker, OSGi/Karaf
> Reporter: Colm O hEigeartaigh
> Assignee: Jean-Baptiste Onofré
> Priority: Major
> Fix For: 5.16.0, 5.15.12
>
> Time Spent: 20m
> Remaining Estimate: 0h
>
> This task is to update Pax URL to get rid of:
> pax-url-aether-2.6.1.jar/META-INF/maven/org.codehaus.plexus/plexus-utils/pom.xml
> (pkg:maven/org.codehaus.plexus/[email protected],
> cpe:2.3:a:plexus-utils_project:plexus-utils:3.0.17:*:*:*:*:*:*:*) : Directory
> traversal in org.codehaus.plexus.util.Expand, Possible XML Injection
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
