[AMQ-7357] Update to Pax URL 2.6.2

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 5.16.0, 5.15.12
• Component/s: Broker, OSGi/Karaf
• Assignee: Jean-Baptiste Onofré
• Reporter: Colm O hEigeartaigh
• Created: 28/Nov/19 16:05
• Updated: 23/Jan/20 07:14
• Resolved: 23/Jan/20 07:14

Description

This task is to update Pax URL to get rid of:

pax-url-aether-2.6.1.jar/META-INF/maven/org.codehaus.plexus/plexus-utils/pom.xml (pkg:maven/org.codehaus.plexus/plexus-utils@3.0.17, cpe:2.3:a:plexus-utils_project:plexus-utils:3.0.17:::::::*) : Directory traversal in org.codehaus.plexus.util.Expand, Possible XML Injection

Issue Links

• links to: GitHub Pull Request #425