Hi everyone, I submit Apache Karaf runtime 4.3.5 to your vote. This release includes Pax Logging 2.0.13 update: - with logback 1.2.9 upgrade, fixing CVE-2021-42550 - with log4j 2.17.0 upgrade, fixing CVE-2021-45105
Please take a look on Release Notes for details ! Release Notes: https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12311140&version=12350856 Staging Maven Repository: https://repository.apache.org/content/repositories/orgapachekaraf-1167/ Staging Dist Repository: https://dist.apache.org/repos/dist/dev/karaf/4.3.5/ Git tag: karaf-4.3.5 Please vote to approve this release: [ ] +1 Approve the release [ ] -1 Don't approve the release (please provide specific comments) This vote will be open for at least 72 hours. Regards JB