[AMQ-7357] Update to Pax URL 2.6.2 - ASF JIRA

XML

Word

Printable

JSON

Details

Type: Bug
Status: Resolved
Priority: Major
Resolution: Fixed
Affects Version/s: None
Fix Version/s: 5.16.0, 5.15.12
Component/s: Broker, OSGi/Karaf
Labels:
None

Description

This task is to update Pax URL to get rid of:

pax-url-aether-2.6.1.jar/META-INF/maven/org.codehaus.plexus/plexus-utils/pom.xml (pkg:maven/org.codehaus.plexus/plexus-utils@3.0.17, cpe:2.3:a:plexus-utils_project:plexus-utils:3.0.17:::::::*) : Directory traversal in org.codehaus.plexus.util.Expand, Possible XML Injection

Attachments

Issue Links

links to

GitHub Pull Request #425

Activity

People

Assignee:: Jean-Baptiste Onofré

Reporter:: Colm O hEigeartaigh

Votes:: 0 Vote for this issue

Watchers:: 2 Start watching this issue

Dates

Created:: 28/Nov/19 16:05

Updated:: 23/Jan/20 07:14

Resolved:: 23/Jan/20 07:14

Time Tracking

Estimated:

Not Specified

Remaining:

Logged:

0.5h