As discussed on the vote thread, I cancel this release to include Pax
Logging 2.0.12 that will upgrade to log4j 2.0.16.
I will start a new vote asap.
Sorry about that,
Regards
JB
On 13/12/2021 16:24, Jean-Baptiste Onofré wrote:
Hi everyone,
I submit Apache Karaf runtime 4.3.4 to your vote (take #2).
This release includes dependency upgrades, fixes, and improvements,
especially:
- upgrade to Pax Logging 2.0.11, upgrading to log4j2 2.0.15, fixing
important security issue (CVE-2021-44228)
- align dependencies versions between Karaf and Pax *
- fix missing system export packages
- fix on Karaf features json support
- fix features autoRefresh configuration handling
- fix on sshd session handling
- update to sshd 2.8.0
- lot of pax * updates
- and much more !
Please take a look on Release Notes for details !
Release Notes:
https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12311140&version=12350547
Staging Maven Repository:
https://repository.apache.org/content/repositories/orgapachekaraf-1164/
Staging Dist Repository:
https://dist.apache.org/repos/dist/dev/karaf/4.3.4/
Git tag:
karaf-4.3.4
Please vote to approve this release:
[ ] +1 Approve the release
[ ] -1 Don't approve the release (please provide specific comments)
This vote will be open for at least 72 hours.
Regards
JB
