You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@karaf.apache.org by "Manju Sahu (Jira)" <ji...@apache.org> on 2022/02/23 08:05:00 UTC

[jira] [Created] (KARAF-7396) overrides.properties is not overriding but brining up the another version

Manju Sahu created KARAF-7396:
---------------------------------

             Summary: overrides.properties is not overriding but brining up the another version
                 Key: KARAF-7396
                 URL: https://issues.apache.org/jira/browse/KARAF-7396
             Project: Karaf
          Issue Type: Bug
          Components: karaf
    Affects Versions: 4.2.9
            Reporter: Manju Sahu


We are trying to override the pax-logging-api and pax-logging-log4j2 versions from 1.11.6 to 1.11.14 using overrides.properties file with below syntax :

mvn:org.ops4j.pax.logging/pax-logging-log4j2/1.11.14
mvn:org.ops4j.pax.logging/pax-logging-api/1.11.14

Doing so is brining up another version 1.11.14 along with the default version 1.11.6.

Is this expected behaviour or is it not overriding properly?

Are we missing anything at our end? Please help us here.

This is critical for us as we have to fix the log4j vulnerability available in karaf 4.2.9  because of pax - 1.11.6

We can't use the higher version of karaf as it has ssh upgrade issue and raised the bug for the same :

https://issues.apache.org/jira/browse/KARAF-7393



--
This message was sent by Atlassian Jira
(v8.20.1#820001)