The Karaf team is pleased to announce Apache Karaf 4.4.12 release.
Apache Karaf 4.4.12 is an important maintenance release, including:
- fix on the MemoryPlugin on the WebConsole
- avoid injection in a JDBC datasource
- new option to configure dynamic import (in the shell command)
- restrict config:install shell command to the admin role
- ensure configuration files are always written within ${karaf.etc}
- add shell command ACLs for the jdbc and jms scopes
- security improvement (XSS) in the Felix WebConsole embedded in Karaf
(WebConsole)
- restrict feature:repo-add -i and feature:repo-remove -u to admin role
- clean the OSGi bundle cache on JDK version change
- fix race condition corrupting cfg files when updating an existing
configuration
- a bunch of dependencies updates
You can look at the Release Notes for details:
https://github.com/apache/karaf/releases/tag/karaf-4.4.12
You can download Apache Karaf 4.4.12 here:
https://karaf.apache.org/download.html
Enjoy!
The Apache Karaf team
