The week certainly feels like it has zipped by...luckily our community has remained steadily productive:

ApacheCon™ –the ASF's official global conference series, now in its 20th year.
 - NOW OPEN: registration for Apache Roadshow DC and Open Source Job Fair! http://www.apachecon.com/usroadshow18/

ASF Infrastructure –our distributed team on three continents keeps the ASF's infrastructure running around the clock.
 - 7M+ weekly checks yield pert performance at 98.65% uptime. http://status.apache.org/

ASF Operations Factoid –this week, 514 Apache contributors changed 1,282,780 lines of code over 3,434 commits. Top 5 contributors, in order, are: Matt Benson, Pedro Boado, Andrea Cosentino, Tilman Hausherr, and Andrzej Kaczmarek.

Apache Beam™ –an Open Source unified programming model to define and execute data processing pipelines, including ETL, batch and stream (continuous) processing.
 - Apache Beam 2.7.0 released https://beam.apache.org/

Apache Commons™ Text –Open Source software library that provides a host of algorithms focused on working with strings and blocks of text.
 - Apache Commons Text 1.6 released http://commons.apache.org/

Apache Groovy™ –a multi-facet programming language for the JVM.
 - Apache Groovy 2.5.3 released http://groovy.apache.org

Apache OpenMeetings™ –provides video conferencing, instant messaging, white board, collaborative document editing and other groupware tools using API functions of the Red5 Streaming Server for Remoting and Streaming.
 - Apache OpenMeetings 4.0.6 released http://openmeetings.apache.org/

Apache Struts™ –an elegant, extensible framework for creating enterprise-ready Java Web applications.
 - Apache Struts 2.3.36 GA and 2.5.18 GA released https://struts.apache.org/

Apache Tomcat™ –an Open Source software implementation of the Java Servlet, JavaServer Pages, Java Unified Expression Language, Java WebSocket and JASPIC technologies.
 - Apache Tomcat JK Connectors 1.2.46 released https://tomcat.apache.org/

Apache Velocity™ Tools –a library of template tools and helpers to ease the use of the Apache Velocity template engine in standalone applications and in webapps.
 - Apache Velocity Tools 3.0 released http://velocity.apache.org/

Did You Know?

 - ASF Operations Summary: Q1 FY2019 https://s.apache.org/qiKn

 - ASF Annual Report for FY2018 https://s.apache.org/FY2018AnnualReport

 - The Apache Software Foundation Celebrates 19 Years of Open Source Leadership "The Apache Way" https://s.apache.org/gK4Q

 - Read "Open – For Business – At the ASF" by Merv Adrian, VP Research at Gartner https://blogs.gartner.com/merv-adrian/2018/03/27/open-for-business-at-the-asf/

 - The Apache Software Foundation 2018 Vision Statement https://s.apache.org/zqC3

 - Apache in 2017 - By The Digits https://s.apache.org/h8do

 - Foundation Statement –Apache Is Open. https://s.apache.org/PIRA

# # #

Friday greetings from the Apache Community! Join us for a look back at what's happened over the last week:

ApacheCon™ –the ASF's official global conference series, now in its 20th year.
 - FINAL CALL: CFP for Apache Roadshow DC closes 15 October http://www.apachecon.com/usroadshow18/

ASF Infrastructure –our distributed team on three continents keeps the ASF's infrastructure running around the clock.
 - 7M+ weekly checks yield solid performance at 97.92% uptime. http://status.apache.org/

ASF Operations Factoid –this week, 504 Apache contributors changed 1,129,855 lines of code over 3,205 commits. Top 5 contributors, in order, are: Derek Gelinas, Jeremy Mitchell, Till Rohrmann, Gilbert Song, and Bryan Call.

Apache Arrow™ –a columnar in-memory analytics layer designed to accelerate Big Data.
 - Apache Arrow 0.11.0 released https://arrow.apache.org/

Apache Commons™ Text –Open Source software library that provides a host of algorithms focused on working with strings and blocks of text.
 - Apache Commons Text 1.5 released http://commons.apache.org/

Apache PDFBox™ –an Open Source Java tool for working with PDF documents.
 - [CVE-2018-11797] DoS vulnerability in Apache PDFBox parser http://mail-archives.apache.org/mod_mbox/www-announce/201810.mbox/%3C12424b12-53c8-d4e4-4b93-8bcbc83488ec%40apache.org%3E

Apache Qpid™ Proton –a messaging library for the Advanced Message Queuing Protocol 1.0.
 - Apache Qpid Proton 0.26.0 released http://qpid.apache.org/

Apache Subversion™ –the popular Open Source, centralized version control system.
 - Apache Subversion 1.10.3 released https://subversion.apache.org/

Apache Tika™ –a toolkit for detecting and extracting metadata and structured text content from various documents using existing parser libraries.
 - Apache Tika 1.19.1 released https://tika.apache.org/
 - [CVE-2018-11796] Apache Tika Denial of Service via XML Entity Expansion Vulnerability http://mail-archives.apache.org/mod_mbox/www-announce/201810.mbox/%3CCAC1dCwUfCG9Vo8UhBzE1U7EgedjaVuDqQ3qYpXn0mFv8DXYT0Q%40mail.gmail.com%3E

Did You Know?

 - ASF Operations Summary: Q1 FY2019 https://s.apache.org/qiKn

 - ASF Annual Report for FY2018 https://s.apache.org/FY2018AnnualReport

 - The Apache Software Foundation Celebrates 19 Years of Open Source Leadership "The Apache Way" https://s.apache.org/gK4Q

 - Read "Open – For Business – At the ASF" by Merv Adrian, VP Research at Gartner https://blogs.gartner.com/merv-adrian/2018/03/27/open-for-business-at-the-asf/

 - The Apache Software Foundation 2018 Vision Statement https://s.apache.org/zqC3

 - Apache in 2017 - By The Digits https://s.apache.org/h8do

 - Foundation Statement –Apache Is Open. https://s.apache.org/PIRA

# # #

Happy October! Let's jump into a review of Apache business from the past week:

ApacheCon™ –the ASF's official global conference series, now in its 20th year.
 - Catch ApacheCon North America presentations and interviews via Feathercast https://feathercast.apache.org/ and https://www.youtube.com/user/TheApacheFoundation
 - View, tag, and post #apachecon photos under a Creative Commons license on Flickr https://www.flickr.com/groups/apachecon/pool/
 - CFP closes soon: Apache Roadshow DC and Open Source Job Fair 4 December. CFP open through 15 October; registration open http://www.apachecon.com/usroadshow18/

ASF Infrastructure –our distributed team on three continents keeps the ASF's infrastructure running around the clock.
 - 7M+ weekly checks yield reliable performance at 97.42% uptime. http://status.apache.org/

ASF Operations Factoid –this week, 472 Apache contributors changed 1,343,215 lines of code over 3,200 commits. Top 5 contributors, in order, are: Derek Gelinas, Wes McKinney, Om, Robert Newson, and Colm O hEigeartaigh.

Apache Geode™ –low latency, high concurrency Big Data management solutions.
 - Apache Geode 1.7.0 released http://geode.apache.org/

Apache HTTP Server™ –the world's most popular Web server since 1996.
 - Apache HTTP Server 2.4.35 released http://httpd.apache.org/

Apache Jackrabbit™ –a scalable, high-performance hierarchical content repository designed for use as the foundation of modern world-class Web sites and other demanding content applications.
 - Apache Jackrabbit 2.17.6 and Jackrabbit Oak 1.4.23 released http://jackrabbit.apache.org/

Apache OpenWebBeans™ Meecrowave –a small java enterprise application server framework fully based on Apache Tomcat9 and other JavaEE 8 technologies.
 - Apache Meecrowave 1.2.4 released https://openwebbeans.apache.org/

Apache PDFBox™ –an Open Source Java tool for working with PDF documents.
 - Apache PDFBox 1.8.16 and 2.0.12 released http://pdfbox.apache.org/

Apache Qpid™ –Multiple language implementation of the latest Advanced Message Queuing Protocol (AMQP)
 - Apache Qpid JMS 0.37.0 released http://qpid.apache.org

Apache Subversion™ –the popular Open Source, centralized version control system.
 - Apache Subversion 1.11.0-rc2 released https://subversion.apache.org/

Apache Tomcat™ –an Open Source software implementation of the Java Servlet, JavaServer Pages, Java Unified Expression Language, Java WebSocket and JASPIC technologies.
 - CVE-2018-11784 Apache Tomcat - Open Redirect http://mail-archives.apache.org/mod_mbox/www-announce/201810.mbox/%3C4cf697b0-db03-9eab-f2aa-54c2026d0e88%40apache.org%3E

Did You Know?

 - ASF Operations Summary: Q1 FY2019 https://s.apache.org/qiKn

 - ASF Annual Report for FY2018 https://s.apache.org/FY2018AnnualReport

 - The Apache Software Foundation Celebrates 19 Years of Open Source Leadership "The Apache Way" https://s.apache.org/gK4Q

 - Read "Open – For Business – At the ASF" by Merv Adrian, VP Research at Gartner https://blogs.gartner.com/merv-adrian/2018/03/27/open-for-business-at-the-asf/

 - The Apache Software Foundation 2018 Vision Statement https://s.apache.org/zqC3

 - Apache in 2017 - By The Digits https://s.apache.org/h8do

 - Foundation Statement –Apache Is Open. https://s.apache.org/PIRA

# # # 

Back in 2013, I worked as software developer and architect at a small IT company. We needed a logging framework for the Java based server platform we were developing. Initially, we tried to use the java.util.logging framework built in to the Java platform. But we soon realized that it was insufficient for our needs.

Looking for alternatives, I found Apache Log4j 1.2 and Logback 1.0. I was not very impressed with either of them, and a bit frustrated with the fragmentation of logging frameworks for Java.

Then I discovered Apache Log4j 2, which was still in beta, but looked promising and I decided to try it out. It worked well for us, and I decided to get involved to improve and contribute to it. I hoped that it once will become the standard logging framework for the Java platform.

We used Graylog to aggregate and analyze log events, and I developed a plugin for Log4j 2 to make it easier to integrate with Graylog. This plugin, GelfLayout, was contributed to the project and became part of Log4j 2. Then I got invited to be committer in the Log4j 2 project.

2015 I got a new job at another IT company. We also needed a Java based logging framework, and I introduced Log4j 2. We found the plugin I had developed at the previous job useful. Later, I developed another plugin for our needs, KafkaAppender, and contributed it to the project. Then I got invited to the Apache Logging PMC (as a committer September 2015, and later member of the Project Management Committee June 2016).

So, thanks to open source and the Apache Software Foundation, I was able to develop a software component when working for one employer, and then continue to use it at my next employer.

How can you do this yourself? Most likely you already use some open source software at work, and there are probably cases where it can be changed to fit your needs better. Make use of your right to make changes, and consider contribute them upstream if they constitute generic improvements. That will benefit the larger community by improving widespread software. It will also benefit the company you work for since they will get less maintenance burden when never versions are released. And finally it will benefit your future self when you work for another company using the same open source software. Read more about how to contribute to an Apache open source project here: http://apache.org/foundation/getinvolved.html

= = =

"Success at Apache" is a monthly blog series that focuses on the processes behind why the ASF "just works" https://blogs.apache.org/foundation/category/SuccessAtApache

We're wrapping up September bursting with Apache goodness. Here's what happened this week:

ASF Board –management and oversight of the business affairs of the corporation in accordance with the Foundation's bylaws.
 - Next Board Meeting: 17 October. Board calendar and minutes http://apache.org/foundation/board/calendar.html

ApacheCon™ –the ASF's official global conference series, now in its 20th year.
 - ApacheCon North America is a wrap: catch presentations and interviews via Feathercast https://feathercast.apache.org/ and https://www.youtube.com/user/TheApacheFoundation
 - Up Next: Apache Roadshow DC and Open Source Job Fair 4 December. CFP open through 15 October; registration open http://www.apachecon.com/usroadshow18/

ASF Infrastructure –our distributed team on three continents keeps the ASF's infrastructure running around the clock.
 - 7M+ weekly checks yield perky performance at 99.39% uptime. http://status.apache.org/

ASF Operations Factoid –this week, 514 Apache contributors changed 1,318,698 lines of code over 3,127 commits. Top 5 contributors, in order, are: Dewayne Richardson, Jeremy Mitchell, Gary Gregory, Hendrik Krohns, and Andrea Cosentino.

Apache Allura™ –an Open Source implementation of a software forge, a Web site that manages source code repositories, bug reports, discussions, wiki pages, blogs, and more for any number of individual projects.
 - Apache Allura 1.9.0 released https://allura.apache.org/

Apache Commons™ Lang –provides helper utilities for the java.lang API, notably String manipulation methods, basic numerical methods, object reflection, concurrency, creation and serialization and System properties.
 - Apache Commons Lang 3.8.1 released https://commons.apache.org/

Apache HAWQ™ –combines exceptional MPP-based analytics performance, robust ANSI SQL compliance, Hadoop ecosystem integration and manageability, and flexible data-store format support, all natively in Hadoop, no connectors required.
 - Apache HAWQ 2.4.0.0 released http://hawq.apache.org/

Apache HBase™ –an Open Source, distributed, versioned, non-relational database.
 - Apache HBase 1.2.7 released http://hbase.apache.org/

Apache Juneau™ –a toolkit for marshalling POJOs to a wide variety of content types using a common framework, and for creating sophisticated self-documenting REST interfaces and microservices using very little code.
 - Apache Juneau 7.2.0 released http://juneau.apache.org/

Apache Lucene™ and Solr –the popular, blazing fast, Open Source NoSQL search platform from the Apache Lucene project.
 - Apache Lucene 7.5.0, Apache Solr 7.5.0, and Solr Reference Guide for 7.5 released http://lucene.apache.org/

Apache Parquet™ –a general-purpose columnar file format supporting nested data.
 - Apache Parquet C++ 1.5.0 released http://parquet.apache.org/

Apache PDFBox™ –an Open Source Java library for working with PDF documents.
 - Apache PDFBox JBIG2 ImageIO plugin 3.0.2 http://pdfbox.apache.org/

Apache Pulsar™ –a highly scalable, low latency messaging platform running on commodity hardware.
 - The Apache Software Foundation Announces Apache® Pulsar™ as a Top-Level Project https://s.apache.org/DLL1

Apache Struts™ –Open Source framework for creating Java web applications.
 - CVE-2018-11776 - RCE when using alwaysSelectFullNamespace http://mail-archives.apache.org/mod_mbox/www-announce/201809.mbox/%3CCAMopvkPK6eEWAga0OQYU_NsVHXHdMzvqQeYrAS9px5F_HbG_Qw%40mail.gmail.com%3E

Apache Traffic Server™ –an HTTP proxy cache.
 - Apache Traffic Server v8.0.0 released https://trafficserver.apache.org/

Did You Know?

 - ASF Operations Summary: Q1 FY2019 https://s.apache.org/qiKn

 - ASF Annual Report for FY2018 https://s.apache.org/FY2018AnnualReport

 - The Apache Software Foundation Celebrates 19 Years of Open Source Leadership "The Apache Way" https://s.apache.org/gK4Q

 - Read "Open – For Business – At the ASF" by Merv Adrian, VP Research at Gartner https://blogs.gartner.com/merv-adrian/2018/03/27/open-for-business-at-the-asf/

 - The Apache Software Foundation 2018 Vision Statement https://s.apache.org/zqC3

 - Apache in 2017 - By The Digits https://s.apache.org/h8do

 - Foundation Statement –Apache Is Open. https://s.apache.org/PIRA

# # # 

Wakefield, MA —25 September 2018— The Apache Software Foundation (ASF), the all-volunteer developers, stewards, and incubators of more than 350 Open Source projects and initiatives, announced today Apache^® Pulsar™ as a Top-Level Project (TLP).

Apache Pulsar is a next-generation, Open Source distributed publish-and-subscribe messaging system designed for scalability, flexibility, and no data loss.

"We are very proud of Pulsar reaching this important milestone. This is the testament to all work done over the years by all the contributors, before and after starting our journey within The Apache Software Foundation," said Matteo Merli, Vice President of Apache Pulsar. "During the incubation process, it has been amazing to see the community grow and the project mature at such a high pace. The last year has seen the evolution of Pulsar from a its original messaging core into an integrated platform for data in motion. We are thrilled to continue drive the innovation in this exciting and fast moving space."

Pulsar is a highly scalable, low latency messaging platform running on commodity hardware. It provides simple pub-sub and queue semantics over topics, lightweight compute framework, automatic cursor management for subscribers, and cross-datacenter replication. The project was originally developed at Yahoo (now part of Oath), and was submitted to the Apache Incubator June 2017. 

The initial goal for Pulsar was to create a multi-tenant scalable messaging system that could serve as a unified platform for a wide set of very demanding use cases. Thanks to the original design we have been able to iterate and expand the scope of the project, adding lightweight compute and a connector frameworks that allow users to process data and integrate with external systems, all from within Pulsar. 

The unique architecture of Pulsar, which separates the serving and storage layers, leveraging Apache BookKeeper as the storage component, has proven to be a key strong point. The two layers architecture enables Pulsar to offer a vastly simplified approach to the cluster operations, allowing operators to easily expand clusters and replace failed nodes, or by providing a much higher write and read availability. 

Apache Pulsar is in use at MercadoLibre, Oath, One Click Retail, STICorp, TaxiStartup, Yahoo Japan Corporation, and Zhaopin.com, among others.

"Launching Pulsar at Yahoo in 2015, our goal has always been to make Pulsar widely used and well-integrated with other large-scale open source software," said Joe Francis, Director, Storage and Messaging, Oath. "We are excited for Pulsar's graduation and to see the growth of its vibrant open-source developer community within The Apache Software Foundation. At Oath we run Apache Pulsar at scale across many major products — including Yahoo Mail, Yahoo Finance, Yahoo Sports and Oath Ad Platforms — and in multiple data centers across the globe, with full mesh replication. Pulsar will continue to be an integral part of our tech stack, in streaming and also as a bridge between public and private clouds in our hybrid cloud strategy."

"At Zhaopin.com, we have used Apache Pulsar to build our enterprise event bus, because it has many enterprise features to address the shortcomings of existing messaging systems, such as message durability, low latency," said Hui Li, Director of Infrastructure Group at Zhaopin. "We also contributed a few exciting features to Pulsar, and are planning to work with the community to contribute more. It's been thrilling to watch the community grow, and I'm very proud and excited to see that the project is graduating. Pulsar has a bright future, and I'm looking forward to what's to come."

"We have used Apache Pulsar as a centralized pub-sub messaging platform for many of our services/applications. It has remarkable features; multi-tenancy and horizontal scalability that allows us to deal with a large number of services/applications on a single system, and durability, high throughput and low latency bring reliable real-time pub-sub messaging to users," said Nozomi Kurihara, Manager of Messaging Platform team at Yahoo Japan Corporation. "We're very excited with the graduation of Pulsar, and strongly believe it will play a significant role in the next generation of stream processing. We will continue to contribute by sending more pull-requests and by holding community events etc. in our aspirations for continued growth."

"After two years of struggling with the complexity of other technologies, we turned to Apache Pulsar for a new platform that would simplify our data pipeline," said Jowanza Joseph, Principal Software Engineer at One Click Retail. "Because of Pulsar's unique combination of messaging and stream processing, we've been able to replace multiple systems with one solution that works seamlessly in our Kubernetes environment. Pulsar functions has allowed us to dramatically simplify our stream processing pipeline and to reduce the cost associated with production grade stream processing systems. Seeing Pulsar become a top-level Apache project is a great milestone that validates our confidence in the current and future innovations of Pulsar and the Pulsar community."

"With the graduation, we hope to take the Apache Pulsar project and community to the next level and to reach a wider set of users and contributors, with the ultimate goal of building a strong ecosystem," added Merli. "We welcome anyone to join our efforts by helping with code, documentation or technical discussions in our forums."

Catch Apache Pulsar in action at ApacheCon North America 24-27 September 2018.

Apache Pulsar software is released under the Apache License v2.0 and is overseen by a self-selected team of active contributors to the project. A Project Management Committee (PMC) guides the Project's day-to-day operations, including community development and product releases. For downloads, documentation, and ways to become involved with Apache Pulsar, visit http://pulsar.apache.org/ and https://twitter.com/apache_pulsar .

About The Apache Software Foundation (ASF)
Established in 1999, the all-volunteer Foundation oversees more than 350 leading Open Source projects, including Apache HTTP Server --the world's most popular Web server software. Through the ASF's meritocratic process known as "The Apache Way," more than 730 individual Members and 6,800 Committers across six continents successfully collaborate to develop freely available enterprise-grade software, benefiting millions of users worldwide: thousands of software solutions are distributed under the Apache License; and the community actively participates in ASF mailing lists, mentoring initiatives, and ApacheCon, the Foundation's official user conference, trainings, and expo. The ASF is a US 501(c)(3) charitable organization, funded by individual donations and corporate sponsors including Aetna, Anonymous, ARM, Bloomberg, Budget Direct, Capital One, Cerner, Cloudera, Comcast, Facebook, Google, Hortonworks, Huawei, IBM, Indeed, Inspur, LeaseWeb, Microsoft, Oath, ODPi, Pineapple Fund, Pivotal, Private Internet Access, Red Hat, Target, and Union Investment. For more information, visit http://apache.org/ and https://twitter.com/TheASF

© The Apache Software Foundation. "Apache", "Pulsar", "Apache Pulsar", "BookKeeper", "Apache BookKeeper", and "ApacheCon" are registered trademarks or trademarks of the Apache Software Foundation in the United States and/or other countries. All other brands and trademarks are the property of their respective owners.

# # #

As another week draws to a close, let's take a look at the Apache community's activities from the past week:

ASF Board –management and oversight of the business affairs of the corporation in accordance with the Foundation's bylaws.
 - The Apache Software Foundation Operations Summary: May - July 2018 https://s.apache.org/qiKn
 - Next Board Meeting: 17 October. Board calendar and minutes http://apache.org/foundation/board/calendar.html

ASF Fundraising –support through donations and Sponsorship help offset the ASF's day-to-day operating expenses and keep Apache software for everyone.
 - The Apache^® Software Foundation Welcomes Tencent as its Newest Sponsor at the Platinum Level https://s.apache.org/KzEz

ApacheCon™ –the ASF's official global conference series, now in its 20th year.
 - 24-27 September: T-3 days to Montreal. 100+ Apache project and community sessions, from CloudStack to Spark to Tomcat to Geospatial to Hackathon, BarCamp, and more. See you there! http://apachecon.com/acna18/
 - Guest Post: looking forward to learning more about the wide array of projects in the Apache fold at ApacheCon https://s.apache.org/RkWd
 - 4 December: Apache Roadshow DC and Open Source Job Fair. CFP open through 15 October http://www.apachecon.com/usroadshow18/

ASF Infrastructure –our distributed team on three continents keeps the ASF's infrastructure running around the clock.
 - 7M+ weekly checks yield deft performance at 99.41% uptime. http://status.apache.org/

ASF Operations Factoid –this week, 504 Apache contributors changed 1,297,500 lines of code over 3,801 commits. Top 5 contributors, in order, are: Radu Cotescu, Jean-Baptiste Onofré, Carsten Ziegeler, Hervé Boutemy, and Carlos Sanchez Gonzalez.

Apache Attic –provides process and solutions to make it clear when an Apache project has reached its end of life.
 - Apache Lucy has retired http://mail-archives.apache.org/mod_mbox/www-announce/201809.mbox/%3Cpony-a4cac82164ef67d9d07d379b5d5d8c4abe1e02ff-a56909df10a4d5ddf5298357d8c193a36e67aeb0%40announce.apache.org%3E

Apache Atlas™ –a scalable and extensible set of core foundational governance services.
 -  Apache Atlas 1.1.0 released http://atlas.apache.org/

Apache Calcite™ Avatica Go –framework for building database drivers; the Avatica Go client is a Go database/sql driver that enables Go programs to communicate with the Avatica server.
 - Apache Calcite Avatica Go 3.2.0 released https://calcite.apache.org/

Apache Directory™ Studio –a complete directory tooling platform intended to be used with any LDAP server however it is particularly designed for use with ApacheDS.
 - Apache Directory Studio 2.0-0-M14 released https://directory.apache.org/

Apache Flink™ –an Open Source stream processing framework for distributed, high-performing, always-available, and accurate data streaming applications.
 - Apache Flink 1.5.4 and 1.6.1 released https://flink.apache.org/

Apache Jackrabbit™ –a scalable, high-performance hierarchical content repository designed for use as the foundation of modern world-class Web sites and other demanding content applications.
 - Apache Jackrabbit Oak 1.6.14 released http://jackrabbit.apache.org/

Apache JMeter™ –a 100% pure Java application designed to test server applications.
 - Apache JMeter 5.0 released http://jmeter.apache.org/

Apache Kylin™ –an Open Source Distributed Analytics Engine designed to provide SQL interface and multi-dimensional analysis (OLAP) on Apache Hadoop, supporting extremely large datasets.
 - Apache Kylin 2.5.0 released https://kylin.apache.org/

Apache Portable Runtime™ –software libraries that provide a predictable and consistent interface to underlying platform-specific implementations.
 - Apache Portable Runtime APR 1.6.5 released http://apr.apache.org/

Apache Pulsar (incubating) –a highly scalable, low latency messaging platform running on commodity hardware.
 - Apache Pulsar 2.1.1-incubating released https://pulsar.incubator.apache.org/

Apache SpamAssassin™ –an extensible email filter used to identify spam.
 - Apache SpamAssassin 3.4.2 released https://spamassassin.apache.org/
 - Apache SpamAssassin 3.4.2 resolves CVE-2017-15705, CVE-2016-1238, CVE-2018-11780 & CVE-2018-11781 http://mail-archives.apache.org/mod_mbox/www-announce/201809.mbox/%3CCAMMMAUH38nTHLyjMkZQdhLHh6trT%2BEzd%3DMGhS%3D%2B%3DbTuGWcYJSA%40mail.gmail.com%3E

Apache Tika™ –a toolkit for detecting and extracting metadata and structured text content from various documents using existing parser libraries.
 - Apache Tika 1.19 released http://tika.apache.org/
 - [CVE-2018-11761] Apache Tika DoS XML Entity Expansion Vulnerability http://mail-archives.apache.org/mod_mbox/www-announce/201809.mbox/%3CCAC1dCwVx2Z1haCnvYBhH7nQRN4kYKjwkLfjsCbeFHv2tRcBonA%40mail.gmail.com%3E
 - [CVE-2018-11762] Zip Slip Vulnerability in Apache Tika's tika-app http://mail-archives.apache.org/mod_mbox/www-announce/201809.mbox/%3CCAC1dCwV2-kTJKjNO1rV65bQrekkur7OWAu1x%2BpPRToRRYk%3DGPA%40mail.gmail.com%3E
 - [CVE-2018-8017] Apache Tika Denial of Service Vulnerability -- Potential Infinite Loop in IptcAnpaParser http://mail-archives.apache.org/mod_mbox/www-announce/201809.mbox/%3CCAC1dCwVOEYsB1c4s2DYkhsafT8q3Fupt_OFugXj9J1RCZuf3UQ%40mail.gmail.com%3E

Apache Tomcat™ –an Open Source software implementation of the Java Servlet, JavaServer Pages, Java Unified Expression Language, Java WebSocket and JASPIC technologies.
- Apache Tomcat 7.0.91 released https://tomcat.apache.org/

Apache Wicket™ –an Open Source Java component oriented Web application framework that powers thousands of Web applications and Web sites for governments, stores, universities, cities, banks, email providers, and more.
 - Apache Wicket 8.1.0 released http://wicket.apache.org/

Did You Know?

 - ASF Annual Report for FY2018 https://s.apache.org/FY2018AnnualReport

 - The Apache Software Foundation Celebrates 19 Years of Open Source Leadership "The Apache Way" https://s.apache.org/gK4Q

 - Read "Open – For Business – At the ASF" by Merv Adrian, VP Research at Gartner https://blogs.gartner.com/merv-adrian/2018/03/27/open-for-business-at-the-asf/

 - The Apache Software Foundation 2018 Vision Statement https://s.apache.org/zqC3

 - Apache in 2017 - By The Digits https://s.apache.org/h8do

 - Foundation Statement –Apache Is Open. https://s.apache.org/PIRA

# # # 

"The most popular open source software is Apache..."
— DZone “What Open Source Software Do You Use?” [February 2018]

And a happy Friday to you all. Let's review what's up in Apache Land from the last week:

ASF Board –management and oversight of the business affairs of the corporation in accordance with the Foundation's bylaws.
 - Next Board Meeting: 19 September. Board calendar and minutes http://apache.org/foundation/board/calendar.html

ApacheCon™ –the ASF's official global conference series, now in its 20th year.
 - 24-27 September: T-10 days to Montreal. 100+ Apache project and community sessions, from CloudStack to Spark to Tomcat to Geospatial to Hackathon, BarCamp, and more. Join us! http://apachecon.com/acna18/
 - Guest Post: looking forward to learning more about the wide array of projects in the Apache fold at ApacheCon https://s.apache.org/RkWd
 - 4 December: Apache Roadshow DC and Open Source Job Fair. CFP open through 15 October http://www.apachecon.com/usroadshow18/

ASF Infrastructure –our distributed team on three continents keeps the ASF's infrastructure running around the clock.
 - 7M+ weekly checks yield snazzy performance at 99.15% uptime. http://status.apache.org/

ASF Operations Factoid –this week, 494 Apache contributors changed 723,907 lines of code over 2,515 commits. Top 5 contributors, in order, are: Andrea Cosentino, Shaofeng Shi, Mark Thomas, Shawn McKinney, and Carlos Sanchez Gonzalez.

Apache Commons™ Weaver –an easy way to enhance compiled Java classes by generating ("weaving") bytecode into those classes.
 - Apache Commons Weaver 2.0 released https://commons.apache.org/

Apache Directory™ Fortress –a computer security access management facility written in Java. 
 - Apache Fortress 2.0.2 released http://directory.apache.org/

Apache Jackrabbit™ –a scalable, high-performance hierarchical content repository designed for use as the foundation of modern world-class Web sites and other demanding content applications.
 - Apache Jackrabbit Oak 1.2.30 released http://jackrabbit.apache.org/

Apache Kylin™ –an Open Source Distributed Analytics Engine designed to provide SQL interface and multi-dimensional analysis (OLAP) on Apache Hadoop, supporting extremely large datasets.
 - Apache Kylin 2.4.1 released https://kylin.apache.org/

Apache MyFaces™ –a JavaServer Faces 2.3 implementation as specified by JSR-372.
 - MyFaces Core v2.3.2 released http://myfaces.apache.org/

Apache POI™ –a library for reading and writing Microsoft Office file formats, such as Excel, PowerPoint, Word, Visio, Publisher and Outlook.
 - Apache POI 4.0.0 released https://poi.apache.org/

Apache Qpid™ –implements the latest AMQP specification, the first open standard for enterprise messaging.
 - Apache Qpid Proton 0.25.0 released https://qpid.apache.org/

Apache SystemML™ –a machine learning platform optimal for Big Data.
 - Apache SystemML 1.2.0 released http://systemml.apache.org/

Apache Tomcat™ –an Open Source software implementation of the Java Servlet, JavaServer Pages, Java Unified Expression Language, Java WebSocket and JASPIC technologies.
- Apache Tomcat 8.5.34 and 9.0.12 released https://tomcat.apache.org/

Did You Know?

 - ASF Annual Report for FY2018 https://s.apache.org/FY2018AnnualReport

 - The Apache Software Foundation Celebrates 19 Years of Open Source Leadership "The Apache Way" https://s.apache.org/gK4Q

 - Read "Open – For Business – At the ASF" by Merv Adrian, VP Research at Gartner https://blogs.gartner.com/merv-adrian/2018/03/27/open-for-business-at-the-asf/

 - The Apache Software Foundation 2018 Vision Statement https://s.apache.org/zqC3

 - Apache in 2017 - By The Digits https://s.apache.org/h8do

 - Foundation Statement –Apache Is Open. https://s.apache.org/PIRA

# # # 

Welcome, September. Here's what the Apache community has been working on over the past week:

Success at Apache –a monthly blog series that focuses on the processes behind why the ASF "just works".
 - 赢在 Apache: If it helps others, all the better. by Sally Khudairi https://s.apache.org/Et2y

ASF Board –management and oversight of the business affairs of the corporation in accordance with the Foundation's bylaws.
 - Next Board Meeting: 19 September. Board calendar and minutes http://apache.org/foundation/board/calendar.html

ApacheCon™ –the ASF's official global conference series, now in its 20th year.
 - 24-27 September: T-17 days to Montreal. Don't miss 100+ Apache project and community sessions, from CloudStack to Spark to Tomcat to Geospatial to Hackathon, BarCamp, and more. Join us! http://apachecon.com/acna18/
 - NEW DATE: 4 December: Apache Roadshow DC and Open Source Job Fair. CFP open through 15 October http://www.apachecon.com/usroadshow18/

ASF Infrastructure –our distributed team on three continents keeps the ASF's infrastructure running around the clock.
 - 7M+ weekly checks yield snazzy performance at 99.43% uptime. http://status.apache.org/

ASF Operations Factoid –this week, 313 Apache contributors changed 391,173 lines of code over 1,733 commits. Top 5 contributors, in order, are: Harbs, Andrea Cosentino, Raphael Luta, Jonathan Hung, and Carlos Sanchez Gonzalez.

Apache BookKeeper™ –a reliable replicated log service.
 - Apache BookKeeper 4.7.2 released https://bookkeeper.apache.org/

Apache Daffodil (incubating) –an implementation of the Data Format Description Language (DFDL) used to convert between fixed format data and XML/JSON.
 - Apache Daffodil (incubating) 2.2.0 released https://daffodil.apache.org/

Apache Directory™ –provides directory solutions entirely written in Java.
 - Apache Directory LDAP API 2.0.0.AM2 released http://directory.apache.org/

Apache HBase™ –the Hadoop database; a distributed, scalable, Big Data store.
 - Apache HBase 2.0.2 released http://hbase.apache.org

Apache Jackrabbit™ –a scalable, high-performance hierarchical content repository designed for use as the foundation of modern world-class Web sites and other demanding content applications.
 - Apache Jackrabbit 2.14.6 and Jackrabbit Oak 1.8.7 and 1.9.8 released http://jackrabbit.apache.org/

Apache JSPWiki™ –a feature-rich and extensible WikiWiki engine built around the standard JEE components (Java, servlets, JSP).
 - Apache JSPWiki 2.10.5 released https://jspwiki-wiki.apache.org/

Apache OpenMeetings™ –provides video conferencing, instant messaging, white board, collaborative document editing and other groupware tools.
 - Apache OpenMeetings 4.0.5 is released http://openmeetings.apache.org

Apache OpenWebBeans™ –an ALv2-licensed implementation of the "Contexts and Dependency Injection for the Java EE platform" specification which is defined as JSR-299.
 - Apache OpenWebBeans-2.0.7 CDI container released http://openwebbeans.apache.org

Apache Qpid™ –implements the latest AMQP specification, the first open standard for enterprise messaging.
 - Apache Qpid for Java 6.1.7 released https://qpid.apache.org/

Apache SystemML™ –a machine learning platform optimal for Big Data.
 - Apache SystemML 1.2.0 released http://systemml.apache.org/

Apache Tomcat™ Connectors –an Open Source implementation of the Java Servlet, JavaServer Pages, Java Expression Language and Java WebSocket technologies.
- Apache Tomcat Connectors 1.2.44 released https://tomcat.apache.org/

Did You Know?

 - ASF Annual Report for FY2018 https://s.apache.org/FY2018AnnualReport

 - The Apache Software Foundation Celebrates 19 Years of Open Source Leadership "The Apache Way" https://s.apache.org/gK4Q

 - Read "Open – For Business – At the ASF" by Merv Adrian, VP Research at Gartner https://blogs.gartner.com/merv-adrian/2018/03/27/open-for-business-at-the-asf/

 - The Apache Software Foundation 2018 Vision Statement https://s.apache.org/zqC3

 - Apache in 2017 - By The Digits https://s.apache.org/h8do

 - Foundation Statement –Apache Is Open. https://s.apache.org/PIRA

# # # 

 - Did you know that since Apache Groovy was first announced 15 years ago, the project has had 160+ releases, 320+ contributors and 100M+ downloads? http://groovy.apache.org/

 - Did you know that the CFPs for DataWorks Summit (18-21 March 2019/Barcelona and 20-23 May 2019/Washington DC) closes 14 September? https://dataworkssummit.com/

 - Did you know that Chick-fil-A uses Apache MXNet (incubating) vision models to alert when their fries sit for too long? http://mxnet.apache.org/

Apache Community Notices:

 - "Success at Apache" focuses on the processes behind why the ASF "just works". https://blogs.apache.org/foundation/category/SuccessAtApache

 - Please follow/like/re-tweet the ASF on social media: @TheASF on Twitter and on LinkedIn at https://www.linkedin.com/company/the-apache-software-foundation

 - Do friend and follow us on the Apache Community Facebook page https://www.facebook.com/ApacheSoftwareFoundation/and Twitter account https://twitter.com/ApacheCommunity

 - The list of Apache project-related MeetUps can be found at http://events.apache.org/event/meetups.html

 - Catch members of the Apache community at Solutions Hamburg 12-14 September in Hamburg --stop by the Apache booth and say hello! https://solutions.hamburg/

 - ApacheCon North America will be held 24-27 September in Montreal http://apachecon.com/

 - The Apache Spark community will be presenting at In-Memory Computing Summit North America 2-3 October in San Francicso https://www.imcsummit.org/2018/us/

 - The Apache Big Data community will be at DataWorks Summit 18-21 March 2019 in Barcelona and 20-23 May 2019 in Washington DC https://dataworkssummit.com/

 - Find out how you can participate with Apache community/projects/activities --opportunities open with Apache HTTP Server, Avro, ComDev (community development), Directory, Incubator, OODT, POI, Polygene, Syncope, Tika, Trafodion, and more! https://helpwanted.apache.org/

 - Are your software solutions Powered by Apache? Download & use our "Powered By" logos http://www.apache.org/foundation/press/kit/#poweredby

= = =

For real-time updates, sign up for Apache-related news by sending mail to announce-subscribe@apache.org and follow @TheASF on Twitter. For a broader spectrum from the Apache community, https://twitter.com/PlanetApache provides an aggregate of Project activities as well as the personal blogs and tweets of select ASF Committers.

 - Did you know that the Girl Scouts of the Green and White Mountains (New Hampshire and Vermont)'s STEM program on 22 September teaches girls how to code different Java programs and games using Apache NetBeans (incubating)? http://bit.ly/2N3xGdx

 - Did you know that the CFP for MesosCon (5-7 November/NYC) is now open through 27 August? http://mesoscon2018.org

 - Did you know that Chick-fil-A uses Apache MXNet (incubating) vision models to alert when their fries sit for too long? http://mxnet.apache.org/

Apache Community Notices:

 - "Success at Apache" focuses on the processes behind why the ASF "just works". https://blogs.apache.org/foundation/category/SuccessAtApache

 - Please follow/like/re-tweet the ASF on social media: @TheASF on Twitter and on LinkedIn at https://www.linkedin.com/company/the-apache-software-foundation

 - Do friend and follow us on the Apache Community Facebook page https://www.facebook.com/ApacheSoftwareFoundation/and Twitter account https://twitter.com/ApacheCommunity

 - The list of Apache project-related MeetUps can be found at http://events.apache.org/event/meetups.html

 - ApacheCon North America will be held 24-27 September in Montreal http://apachecon.com/

 - Find out how you can participate with Apache community/projects/activities --opportunities open with Apache HTTP Server, Avro, ComDev (community development), Directory, Incubator, OODT, POI, Polygene, Syncope, Tika, Trafodion, and more! https://helpwanted.apache.org/

 - Are your software solutions Powered by Apache? Download & use our "Powered By" logos http://www.apache.org/foundation/press/kit/#poweredby

= = =

For real-time updates, sign up for Apache-related news by sending mail to announce-subscribe@apache.org and follow @TheASF on Twitter. For a broader spectrum from the Apache community, https://twitter.com/PlanetApache provides an aggregate of Project activities as well as the personal blogs and tweets of select ASF Committers.

Wakefield, MA —23 August 2018— The Apache Software Foundation (ASF), the all-volunteer developers, stewards, and incubators of more than 350 Open Source projects and initiatives, announced today Apache^® HAWQ^® as a Top-Level Project (TLP).

Apache HAWQ is an advanced enterprise SQL-on-Hadoop query engine and analytic database. It combines the key technological advantages of MPP database with the scalability and convenience of Apache Hadoop. HAWQ reads data from and writes data to HDFS natively, delivers industry-leading performance and linear scalability, and provides users with a complete, standards compliant SQL interface.

"We are very excited to see Apache HAWQ graduate as a Top-Level Project and we would like to thank our Incubation mentors for all their help," said Dr. Lei Chang, Vice President of Apache HAWQ. "This is a huge milestone that reflects the collective contributions from the growing global community to deliver a world-class SQL engine for analytics."

HAWQ operates natively in Apache Hadoop to provide users the tools to confidently and successfully interact with petabyte-range data sets. Features include:

• Exceptional performance: parallel processing architecture delivers high performance throughput and low latency —potentially near real time— query responses that can scale to petabyte-sized datasets;
• Robust ANSI SQL compliance: leverage familiar skills. Achieve higher levels of compatibility for SQL-based applications and BI/data visualization tools. Execute complex queries and joins, including roll-ups and nested queries; and 
• Apache Hadoop ecosystem integration: integrate and manage with Apache YARN. Provision with Apache Ambari. Interface with Apache HCatalog. Supports Apache Parquet, Apache HBase, and others. Easily scales nodes up or down to meet performance or capacity requirements.

Apache HAWQ is in use at Alibaba, Haier, VMware, ZTESoft, and hundreds of users around the world.

"We admire Apache HAWQ's flexible framework and ability to scale up in a Cloud ecosystem. HAWQ helps those seeking a heterogeneous computing system to handle ad-hoc queries and heavy batch workloads," said Kuien Liu, Computing Platform Architect at Alibaba. "Alibaba encourages more and more engineers to continue to embrace Open Source, and Apache HAWQ stands out as a star project. We are proud to have been collaborating with this community since 2015."

"Haier Group has deployed clusters of more than 30 nodes in the production environment from the very beginning of HAWQ," said Xiaoliang Wu, Big Data Architect at Haier. "We use HAWQ as an ad-hoc query and batch computation engine in areas such as social network services and IOT. Because of its superior scalability and stability, HAWQ greatly improves development efficiency and reduces operation and maintenance costs. We believe that Apache HAWQ is a very competitive product in the SQL-On-Hadoop field."

"We have been using Apache HAWQ at VMware for 4 years now," said Dominie Jacob, Lead Big Data Engineer at VMware Inc. "It is easy to manage and scale using Apache Ambari, and easy to provision and attach more nodes based on demand. Being virtualized, it is easy to provision and attach more nodes based on demand. In our BI Big Data world, HAWQ is the primary database for accessing the Hadoop datasets, building models, and executing predictive model workflows. HAWQ is working seamlessly with billions of records, thousands of Tables/Functions/Tableau-Reports, and hundreds of users. The demand for HAWQ is increasing. As VMware always encourages us to pick up and contribute back to Open Source technologies, we would love to collaborate with this community and see more enhancements. In our BI space, HAWQ is one of the top priorities."

"Apache HAWQ is an attractive technology for Big Data applications," said Zixu Zhao, Architect at ZTESoft. "HAWQ serves as the foundation of our Big Data platform and it has been used in a lot of applications, such as interactive analytics and BI on telecom data. We congratulate HAWQ on becoming an Apache Top-Level Project."

"Becoming an Apache Top-Level Project is an important milestone," added Chang. "There is much work ahead of us, and we look forward to growing the HAWQ community and codebase."

Catch Apache HAWQ in action at ApacheCon North America 24-27 September 2018 http://apachecon.com/acna18/ .

Apache HAWQ software is released under the Apache License v2.0 and is overseen by a self-selected team of active contributors to the project. A Project Management Committee (PMC) guides the Project's day-to-day operations, including community development and product releases. For downloads, documentation, and ways to become involved with Apache HAWQ, visit http://hawq.apache.org/ and https://twitter.com/ApacheHAWQ .

About The Apache Software Foundation (ASF)
Established in 1999, the all-volunteer Foundation oversees more than 350 leading Open Source projects, including Apache HTTP Server --the world's most popular Web server software. Through the ASF's meritocratic process known as "The Apache Way," more than 730 individual Members and 6,800 Committers across six continents successfully collaborate to develop freely available enterprise-grade software, benefiting millions of users worldwide: thousands of software solutions are distributed under the Apache License; and the community actively participates in ASF mailing lists, mentoring initiatives, and ApacheCon, the Foundation's official user conference, trainings, and expo. The ASF is a US 501(c)(3) charitable organization, funded by individual donations and corporate sponsors including Aetna, Anonymous, ARM, Bloomberg, Budget Direct, Capital One, Cerner, Cloudera, Comcast, Facebook, Google, Hortonworks, Huawei, IBM, Indeed, Inspur, LeaseWeb, Microsoft, Oath, ODPi, Pineapple Fund, Pivotal, Private Internet Access, Red Hat, Target, and Union Investment. For more information, visit http://apache.org/ and https://twitter.com/TheASF

© The Apache Software Foundation. "Apache", "HAWQ", "Apache HAWQ", "Ambari", "Apache Ambari", "Hadoop", "Apache Hadoop", "HBase", "Apache HBase", "HCatalog", "Apache HCatalog", "Parquet", "Apache Parquet", "YARN", "Apache YARN", and "ApacheCon" are registered trademarks or trademarks of the Apache Software Foundation in the United States and/or other countries. All other brands and trademarks are the property of their respective owners.

# # #