The Apache Karaf team is pleased so announce Apache Karaf runtime 4.3.5 release.
This release is an important release on the Karaf 4.3.x series bringing security fixes (logshell) especially: - upgrade to jolokia 1.7.1 - upgrade to pax-logging 2.0.12 - upgrade to log4j 2.17.0 fixing CVE-2021-45105 and CVE-2021-44228 - upgrade to logback 1.2.9 fixing CVE-2021-42550 The Release Notes are available here: https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12311140&version=12350856 Download: http://karaf.apache.org/download.html <http://karaf.apache.org/download.html> Enjoy! The Apache Karaf team