Hi Yes, it’s already planned. The 4.3.6 and 4.2.15 releases will be in vote soon.
Regards JB > Le 30 déc. 2021 à 18:17, Robert Dean <robert.d...@bd.com> a écrit : > > Happy holidays everyone! > > Log4j question: Will there need to be another release for the log4j 2.17.1 > security fix? > > Thank you, > Joe Dean > > > PTO Alert: None > > On 12/28/21, 10:55 PM, "Jean-Baptiste Onofre" <j...@nanthrax.net> wrote: > > EXTERNAL EMAIL - Use caution opening attachments and links. > > The Apache Karaf team is pleased so announce Apache Karaf runtime 4.3.5 > release. > > This release is an important release on the Karaf 4.3.x series bringing > security fixes (logshell) especially: > > - upgrade to jolokia 1.7.1 > - upgrade to pax-logging 2.0.12 > - upgrade to log4j 2.17.0 fixing CVE-2021-45105 and CVE-2021-44228 > - upgrade to logback 1.2.9 fixing CVE-2021-42550 > > The Release Notes are available here: > https://urldefense.com/v3/__https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12311140&version=12350856__;!!AMCWqqRremt4Wx4!FbnwTktvh0yfq-_FDRz1PJ4qUVHCiR1-d_HBoBOppcsDztH1QHnA71yc-pttrw$ > > Download: > https://urldefense.com/v3/__http://karaf.apache.org/download.html__;!!AMCWqqRremt4Wx4!FbnwTktvh0yfq-_FDRz1PJ4qUVHCiR1-d_HBoBOppcsDztH1QHnA71xZDuHNXg$ > > <https://urldefense.com/v3/__http://karaf.apache.org/download.html__;!!AMCWqqRremt4Wx4!FbnwTktvh0yfq-_FDRz1PJ4qUVHCiR1-d_HBoBOppcsDztH1QHnA71xZDuHNXg$ > > > > Enjoy! > The Apache Karaf team > > ******************************************************************* > IMPORTANT MESSAGE FOR RECIPIENTS IN THE U.S.A.: > This message may constitute an advertisement of a BD group's products or > services or a solicitation of interest in them. If this is such a message and > you would like to opt out of receiving future advertisements or solicitations > from this BD group, please forward this e-mail to optoutbygr...@bd.com. > [BD.v1.0] > ******************************************************************* > This message (which includes any attachments) is intended only for the > designated recipient(s). It may contain confidential or proprietary > information and may be subject to the attorney-client privilege or other > confidentiality protections. If you are not a designated recipient, you may > not review, use, copy or distribute this message. If you received this in > error, please notify the sender by reply e-mail and delete this message. > Thank you. > ******************************************************************* > Corporate Headquarters Mailing Address: BD (Becton, Dickinson and Company) 1 > Becton Drive Franklin Lakes, NJ 07417 U.S.A.
