Karaf 4.3.3 already ships Jetty 9.4.43: https://github.com/apache/karaf/blob/karaf-4.3.3/assemblies/features/standard/src/main/feature/feature.xml#L902
And Pax Web does as well (I did the release specifically). Regards JB > Le 2 sept. 2021 à 18:44, Robert Varga <n...@hq.sk> a écrit : > > On 02/09/2021 10:33, Jean-Baptiste Onofré wrote: >> Hi everyone, > > Hello JB, everyone, > >> I submit Apache Karaf runtime 4.3.3 to your vote. >> >> This release includes bunch of dependency upgrades, fixes, and >> improvements, especially: >> >> - first round of the specs features repository. This repository use will >> spread (in Karaf and third party projects) and we will improve it, but >> this first round introduces the skeleton we need. >> - ssh fix new closing socket cleanly >> - memory leak fix on the blueprint state service >> - fix on JMX exception push back to the client >> - bunch of dependency updates >> - and much more ! >> >> Please take a look on Release Notes for details ! >> >> Release Notes: >> https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12311140&version=12350142 >> >> >> Staging Maven Repository: >> https://repository.apache.org/content/repositories/orgapachekaraf-1157/ >> >> Staging Dist Repository: >> https://dist.apache.org/repos/dist/dev/karaf/4.3.3/ >> >> Git tag: >> karaf-4.3.3 >> >> Please vote to approve this release: >> >> [ ] +1 Approve the release >> [ ] -1 Don't approve the release (please provide specific comments) > > A quick ODL smoke test passed, but I really would like a release with > https://github.com/eclipse/jetty.project/releases/tag/jetty-9.4.43.v20210629, > which is fixing a CVE. > > Regards, > Robert
