+1 (non-binding)
> On Dec 19, 2021, at 3:33 PM, Jean-Baptiste Onofré <j...@nanthrax.net> wrote:
>
> Hi everyone,
>
> I submit Apache Karaf runtime 4.3.5 to your vote.
> This release includes Pax Logging 2.0.13 update:
> - with logback 1.2.9 upgrade, fixing CVE-2021-42550
> - with log4j 2.17.0 upgrade, fixing CVE-2021-45105
>
> Please take a look on Release Notes for details !
>
> Release Notes:
> https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12311140&version=12350856
>
> Staging Maven Repository:
> https://repository.apache.org/content/repositories/orgapachekaraf-1167/
>
> Staging Dist Repository:
> https://dist.apache.org/repos/dist/dev/karaf/4.3.5/
>
> Git tag:
> karaf-4.3.5
>
> Please vote to approve this release:
>
> [ ] +1 Approve the release
> [ ] -1 Don't approve the release (please provide specific comments)
>
> This vote will be open for at least 72 hours.
>
> Regards
> JB
>
