[
https://issues.apache.org/jira/browse/KARAF-7882?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17907043#comment-17907043
]
ASF GitHub Bot commented on KARAF-7882:
---------------------------------------
jbonofre commented on PR #1888:
URL: https://github.com/apache/karaf/pull/1888#issuecomment-2554053266
I will relaunch Jenkins when Pax URL artifacts will be on Maven Central.
> Upgrade to Pax URL 2.6.15
> -------------------------
>
> Key: KARAF-7882
> URL: https://issues.apache.org/jira/browse/KARAF-7882
> Project: Karaf
> Issue Type: Improvement
> Components: karaf
> Affects Versions: 4.4.6
> Reporter: Martin Lichtin
> Assignee: Jean-Baptiste Onofré
> Priority: Major
>
> Due to CVE-2024-47554
> pax-url-aether has embedded commons-io version 2.11.0 (which should be
> updated to at least 2.14.0 or higher)
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
