>>>>> Jean-Baptiste Onofré <j...@nanthrax.net>: > Hi everyone, > I submit Apache Karaf runtime 4.3.5 to your vote. > This release includes Pax Logging 2.0.13 update: > - with logback 1.2.9 upgrade, fixing CVE-2021-42550 > - with log4j 2.17.0 upgrade, fixing CVE-2021-45105
All of my karaf apps installed without a hitch, and seems to work (not extensively tested, just clicking around and smoketesting). +1 (non-binding)
