You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@activemq.apache.org by "ASF subversion and git services (Jira)" <ji...@apache.org> on 2020/01/23 07:14:00 UTC

[jira] [Commented] (AMQ-7357) Update to Pax URL 2.6.2

    [ https://issues.apache.org/jira/browse/AMQ-7357?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17021821#comment-17021821 ] 

ASF subversion and git services commented on AMQ-7357:
------------------------------------------------------

Commit 52816ef55d1423461c18e1e04090517714d0ff91 in activemq's branch refs/heads/master from Jean-Baptiste Onofré
[ https://gitbox.apache.org/repos/asf?p=activemq.git;h=52816ef ]

Merge pull request #425 from coheigea/AMQ-7357

[AMQ-7357] Update to Pax URL 2.6.2

> Update to Pax URL 2.6.2
> -----------------------
>
>                 Key: AMQ-7357
>                 URL: https://issues.apache.org/jira/browse/AMQ-7357
>             Project: ActiveMQ
>          Issue Type: Bug
>          Components: Broker, OSGi/Karaf
>            Reporter: Colm O hEigeartaigh
>            Assignee: Jean-Baptiste Onofré
>            Priority: Major
>             Fix For: 5.16.0, 5.15.12
>
>          Time Spent: 0.5h
>  Remaining Estimate: 0h
>
> This task is to update Pax URL to get rid of:
> pax-url-aether-2.6.1.jar/META-INF/maven/org.codehaus.plexus/plexus-utils/pom.xml (pkg:maven/org.codehaus.plexus/plexus-utils@3.0.17, cpe:2.3:a:plexus-utils_project:plexus-utils:3.0.17:*:*:*:*:*:*:*) : Directory traversal in org.codehaus.plexus.util.Expand, Possible XML Injection



--
This message was sent by Atlassian Jira
(v8.3.4#803005)