🚨 ثغرة في Apache Karaf تسمح بـ Denial of Service تم اكتشاف ثغرة خطيرة في Apache Karaf Decanter، وهي أداة مراقبة تستخدم على نطاق واسع في بيئات الشركات لجمع وإرسال السجلات. الثغرة، المسماة CVE-2026-24656، تتعلق بعملية Deserialization تسمح للمهاجم بتعطيل الخدمة. هذا الخلل يعرض الأنظمة للخطر ويهدد استمرارية العمليات. 💡 خطوات الحماية: * تأكد من تطبيق أحدث Patches الخاصة بـ Apache Karaf. * راجع إعدادات Deserialization لتأمينها. * راقب سجلات النظام بحثًا عن أي نشاط مشبوه. 🔗 securityonline.info/cve-2026… #الأمن_السيبراني #ApacheKaraf #CVE

Very interesting thread about #TheASF @ApacheCamel and @ApacheKaraf future > lists.apache.org/list.html?d… If you are motivated to maintain OSGi metadata of camel components please answer, it can be a big helper in the decision process and give more strength to the outcome. #OSGi

Eclipse Virgo or @ApacheKaraf, both are powered by OSGi. Virgo was formerly SpringSource dm Server, which has been archived at Eclipse. Karaf 4.4 brings OSGi R8 and JDK 18 support, and also could develop Spring web apps.

So I have created a spring boot camel application. I would like to run this on Apache Karaf container instead of a standalone Java application. Is it possible to run such an application on Karaf 4?

This is a variant of CVE-2016-3427 (JMX preauth deserialization) affecting ApacheKaraf and was identified by @kwnypwny and me in 2021. Shortly afterwards, @mogwailabs released a very interesting blog on CodeQL, which could prevent such variants in future: mogwailabs.de/de/blog/2021/0…

How to setup @grafana agent to export @PrometheusIO metrics from an @ApacheKaraf instance to Grafana Cloud 😊 gist.github.com/Sandared/a1f… @jbonofre

Modulith with @ApacheKaraf

Do you mean Karaf 4.4.0?

*faints* Never thought I'd see this - I have my @ApacheKaraf app working under JDK 18.0.1 and the latest 4.0.4 Karaf (strict mode). A few minor import adjustments, and circular deps fixed, and only one --add-exports for sun.security.util for an older HTTP client dep

🚨Heute mal Werbung in eigener Sache:🚨 Mein Team bei qbilon wächst! 🥳 Wenn du bei uns im Team arbeiten willst und sagst: @OSGiWG, @ApacheKaraf, @vuejs, @kubernetesio, @typescript coole Kombi👍, dann schreib mir einfach eine PM😊 Für mehr Infos: qbilon.io/jobs/

Depends a bit on the context. We'd suggest in general to use @Bndtools (regardless of the bnd workspace model or with maven). The question is in the end how you want it exported.

Looking forward to undoing that bit of hackery when @ApacheKaraf releases 4.3.4 soon™️. I'd love for them to release a 4.2.x update as well so I can remove the hack in our LTS releases as well, but one way or the other we've at least got it patched for now.

How to dynamically route in @ApacheCamel using @OSGiWG and @ApacheKaraf / @jbossorg Fuse : github.com/FuseByExample/cam…

Did you know that @ApacheKaraf (and as far as I understand it a good bit of @OSGiWG ) is used by @InstanaHQ for developing their agent? 😊 I think their usecase is perfectly fitting the promises of OSGi and Karaf at the same time 👍

This was needed a long time ago for #ApacheSling glad to see it coming in. @jbonofre did this in @ApacheKaraf a long time ago.

I'm happy to see Apache Karaf adopting the "modulith" jargon. Probably the best java runtime to support that kind of paradigm

Another OSGi runtime with batteries included is @ApacheKaraf Lots of awesome features are already included and you can start right away with writing your OSGi application karaf.apache.org/ @jbonofre @OSGiWG

How to build microservices in #OSGi with @ApacheKaraf dzone.com/articles/building-… By @martin_fmi if I'm not mistaken @jbonofre @OSGiWG

Resuming work on @TheASF @ApacheKaraf #apache #karaf 5. Hopefully, we might have a first runtime by the end of November, including new services and features ;)

Fixing #ops4j #pax #web with #jetty 9.4.44, I will cut the release tonight (tests in progress), towards to @ApacheKaraf #apache #karaf 4.3.4 !