Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Upgrade to Karaf 4.3.6 #1363

Merged
merged 1 commit into from
Jan 16, 2022
Merged

Upgrade to Karaf 4.3.6 #1363

merged 1 commit into from
Jan 16, 2022

Conversation

wborn
Copy link
Member

@wborn wborn commented Jan 15, 2022

  • Syncs distro customizations with Karaf 4.3.6
  • Resolves app runbundles for the new dependencies
  • Undos the featuresProcessing for using Pax Logging 2.0.13 (Use Pax Logging 2.0.13 #1354)

For release notes, see:

https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12311140&version=12351123

Karaf 4.3.6 uses Pax Logging 2.0.14 (with Log4j 2.17.1) which fixes CVE-2021-44832.


Depends on:

* Syncs distro customizations with Karaf 4.3.6
* Resolves app runbundles for the new dependencies
* Undos the featuresProcessing for using Pax Logging 2.0.13 (openhab#1354)

For release notes, see:

https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12311140&version=12351123

Karaf 4.3.6 uses Pax Logging 2.0.14 (with Log4j 2.17.1) which fixes CVE-2021-44832.

Signed-off-by: Wouter Born <[email protected]>
@wborn wborn requested a review from a team as a code owner January 15, 2022 20:08
@wborn wborn added karaf awaiting other PR Depends on another PR enhancement An enhancement or new feature and removed awaiting other PR Depends on another PR labels Jan 15, 2022
@kaikreuzer kaikreuzer merged commit 4464ec7 into openhab:main Jan 16, 2022
@kaikreuzer kaikreuzer added this to the 3.3 milestone Jan 16, 2022
@wborn wborn deleted the karaf-4.3.6 branch January 16, 2022 13:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement An enhancement or new feature karaf
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants