[
https://issues.apache.org/jira/browse/AMQ-7357?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17021820#comment-17021820
]
ASF subversion and git services commented on AMQ-7357:
------------------------------------------------------
Commit 0891526c26bd2f549dc6f3271466cd392a752068 in activemq's branch
refs/heads/master from Colm O hEigeartaigh
[ https://gitbox.apache.org/repos/asf?p=activemq.git;h=0891526 ]
AMQ-7357 - Update Pax URL
> Update to Pax URL 2.6.2
> -----------------------
>
> Key: AMQ-7357
> URL: https://issues.apache.org/jira/browse/AMQ-7357
> Project: ActiveMQ
> Issue Type: Bug
> Components: Broker, OSGi/Karaf
> Reporter: Colm O hEigeartaigh
> Assignee: Jean-Baptiste Onofré
> Priority: Major
> Fix For: 5.16.0, 5.15.12
>
> Time Spent: 0.5h
> Remaining Estimate: 0h
>
> This task is to update Pax URL to get rid of:
> pax-url-aether-2.6.1.jar/META-INF/maven/org.codehaus.plexus/plexus-utils/pom.xml
> (pkg:maven/org.codehaus.plexus/[email protected],
> cpe:2.3:a:plexus-utils_project:plexus-utils:3.0.17:*:*:*:*:*:*:*) : Directory
> traversal in org.codehaus.plexus.util.Expand, Possible XML Injection
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
