Hi everyone,
I'm submitting Apache Karaf runtime 4.4.12 (rc0) to your vote.
This is a maintenance release on the 4.4.x series, including the following
hardening and fixes:
- fix on the WebConsole MemoryPlugin
- avoid injection issues in the JDBC datasource
- added option to configure dynamic imports
- restrict config:install to the admin role
- apply the JMX RBAC guard to MBean lifecycle operations
- escape %u/%dn/%fqdn substitutions in LDAP search filter
- ensure configuration files are always written within ${karaf.etc}
- add command ACLs for the jdbc and jms scopes
- restrict feature:repo-add -i and feature:repo-remove -u to admin role
- a bunch of dependency updates
You can take a look on the Release Notes for details:
https://github.com/apache/karaf/releases/tag/karaf-4.4.12
Maven Staging Repository:
https://repository.apache.org/content/repositories/orgapachekaraf-1221/
Dist Staging Repository:
https://dist.apache.org/repos/dist/dev/karaf/4.4.12/
KEYS file:
https://dist.apache.org/repos/dist/release/karaf/KEYS
Git tag:
https://github.com/apache/karaf/tree/karaf-4.4.12
Please vote to approve this release:
[ ] +1 Approve the release
[ ] -1 Don't approve the release (please provide specific comments)
This vote will be open for at least 72 hours.
Regards
JB
