The Apache Weekly News Round-up: week ending 28 January 2022

Farewell, January --we're wrapping up the month with another great week. Here are the latest updates on the Apache community's activities:

ASF Infrastructure – our distributed team on three continents keeps the ASF's infrastructure running around the clock.
 - 7M+ weekly checks yield uptime at 100.00%. Performance checks across 50 different service components spread over more than 250 machines in data centers around the world. View the ASF's Infrastructure Uptime site to see the most recent averages.

Apache Code Snapshot – Over the past week, 337 Apache Committers changed 1,533,287 lines of code over 3,738 commits. Top 5 contributors, in order, are: Jarek Potiuk, Sebastian Bazley, Claus Ibsen, Harikrishna Patnala, and Mark Thomas.

Apache Project Announcements – the latest updates by category.

APIs --
 - Apache ShenYu (Incubating) 2.4.2 released
   -- CVE-2022-23944: Improper access control
   -- CVE-2022-23945: Missing authentication allows gateway registration 

Application Servers/Middleware --
 - Apache Karaf runtime 4.3.6 released
   -- CVE-2021-41766: Insecure Java Deserialization
   -- CVE-2022-22932: Path traversal flaws 

Cloud Computing --
 - Apache Kafka 3.1.0  released 

Content --
 - Apache Jackrabbit Oak 1.22.10 released

Databases --
 - Apache Geode 1.14.3 released 

Orchestration --
 - Apache Hop 1.1.0 released 

Servers --
 - Apache Tomcat CVE-2022-23181: Local Privilege Escalation 

Web Frameworks --
 - Apache Struts 2.5.29 released 

Did You Know?

 - Did you know that the ASF published a statement following the 13 January meeting at the White House on the security of Open Source software? https://s.apache.org/jri14

 - Did you know that members of the Apache Arrow, Flink, Kafka, Mahout, Maven, OpenOffice, ShardingSphere, Spark, and other project communities will be presenting at FOSDEM (taking place online 5-6 February)? 

 - Did you know that the CFP for Beam Summit (hybrid event taking place 18-20 July) closes on 15 March?

Apache Community Notices

 - Apache in 2021 - By The Digits + Video highlights 

 - The Apache Month in Review: December 2021 and video highlights

 - Watch "Trillions and Trillions Served", the documentary on the ASF 1) full feature [49 min] 2) "Apache Everywhere" [6 min] 3) "Why Apache" [2.5 min] 4) “Apache Innovation” [40 min] 

 - ASF Annual Report: FY2021 -- Press release and Report (PDF)

 - The Apache Way to Sustainable Open Source Success 

 - Foundation Reports and Statements

 - Presentations from 2021's ApacheCon Asia and ApacheCon@Home are available on the ASF YouTube channel.

 - "Success at Apache" focuses on the people and processes behind why the ASF "just works." 

Posted at 03:05PM Jan 31, 2022 by Swapnil M Mane in Newsletter  |   | 

The Apache Weekly News Round-up: week ending 21 January 2022

We're wrapping up another great week with the following activities from the Apache community:

ASF Infrastructure – our distributed team on three continents keeps the ASF's infrastructure running around the clock.
 - 7M+ weekly checks yield uptime at 100.00%. Performance checks across 50 different service components spread over more than 250 machines in data centers around the world. View the ASF's Infrastructure Uptime site to see the most recent averages.

Apache Code Snapshot – Over the past week, 339 Apache Committers changed 2,470,884 lines of code over 3,505 commits. Top 5 contributors, in order, are: Gary Gregory, Claus Ibsen, Adam Kocoloski, Mark Thomas, and Tian Jiang. 

Apache Project Announcements – the latest updates by category.

APIs --
 - Apache APISIX Java Plugin Runner 0.2.0 released

Application Servers/Middleware --
 - Apache Karaf runtime 4.2.15 and 4.3.6 released

Content --
 - Apache POI 5.2.0 released 

Databases --
 - Apache Geode 1.12.8, 1.13.7 and Kafka Connector 1.1.0 released

Data Management Platform --
 - Apache Ignite 2.12.0 released 

Enterprise Processes Automation / ERP --
 - Apache OFBiz 17.12 End-Of-Life (EOL) announcement https://s.apache.org/hm5oe

Libraries --
 - Apache Log4j CVE-2022-23302: Deserialization of untrusted data in JMSSink in Apache Log4j 1.x
   -- CVE-2022-23305: SQL injection in JDBC Appender in Apache Log4j V1 
   -- CVE-2022-23307: A deserialization flaw in the Chainsaw component of Log4j 1 can lead to malicious code execution 

Orchestration --
 - The Apache Software Foundation Announces Open Source data orchestration platform Apache® Hop™ as a Top-Level Project https://s.apache.org/4s3ci

Observability --
 - Apache SkyWalking Could on Kubernetes 0.6.1 released

Servers --
 - Apache Tomcat 8.5.75, 9.0.58, 10.0.16, and 10.1.0-M10 (alpha) released 

Did You Know?

 - Did you know that the following Apache projects are celebrating anniversaries this month? Congratulations to Apache Cocoon, James, and Web Services (19 years); Lucene (17 years); ActiveMQ (15 years); Hadoop (14 years); River (11 years); Empire-db and Gora (10 years); OpenMeetings (9 years); Samza (7 years); Arrow (6 years); Ranger (5 years); and Gobblin (1 year) https://projects.apache.org/committees.html?date

 - Did you know that Netflix and Target are building modern analytics applications to deliver interactive data experiences using Apache Druid? 

 - Did you know that Disney+Hotstar's streaming data lakes injest 1 million events per second using Apache Kafka, store 14tb of data per day in an Apache HBase warehouse, and stream using Apache Hudi? https://projects.apache.org/projects.html?category

Apache Community Notices

 - Apache in 2021 - By The Digits + Video highlights 

 - The Apache Month in Review: December 2021 and video highlights

 - Watch "Trillions and Trillions Served", the documentary on the ASF 1) full feature [49 min] 2) "Apache Everywhere" [6 min] 3) "Why Apache" [2.5 min] 4) “Apache Innovation” [40 min] 

 - ASF Annual Report: FY2021 -- Press release and Report (PDF)

 - The Apache Way to Sustainable Open Source Success 

 - Foundation Reports and Statements

 - Presentations from 2021's ApacheCon Asia and ApacheCon@Home are available on the ASF YouTube channel.

 - "Success at Apache" focuses on the people and processes behind why the ASF "just works." 

Posted at 02:06PM Jan 24, 2022 by Swapnil M Mane in Newsletter  |   | 

The Apache Weekly News Round-up: week ending 14 January 2022

Happy Friday! Let's take a look at what the Apache community has been up to over the past week:

ASF Security Report 2021 – the state of security across all Apache projects with key metrics, specific vulnerabilities, and the most common ways users of ASF projects were affected by security issues https://s.apache.org/SecurityReport2021

Apache Software Foundation statement on White House Open Source Security Summit https://s.apache.org/jri14

ASF Infrastructure – our distributed team on three continents keeps the ASF's infrastructure running around the clock.
 - 7M+ weekly checks yield uptime at 100.00%. Performance checks across 50 different service components spread over more than 250 machines in data centers around the world. View the ASF's Infrastructure Uptime site to see the most recent averages.

Apache Code Snapshot – Over the past week, 322 Apache Committers changed 1,963,025 lines of code over 3,852 commits. Top 5 contributors, in order, are: Gary Gregory, Antoine Toulme, Claus Ibsen, Mark Thomas, and Dan Klco. 

Apache Project Announcements – the latest updates by category.

Content --
 - Apache Jackrabbit 2.16.9 released

Machine Learning --
 - Apache TVM 0.8.0 released

Network Client --
 - Apache Guacamole 1.4.0 released
   -- CVE-2021-41767: Private tunnel identifier may be included in the non-private details of active connections 
   -- CVE-2021-43999: Improper validation of SAML responses 

Observability --
 - Apache SkyWalking Kong version 0.2.0 released

Did You Know?

 - Did you know that more than 630,000 individuals have contributed to Apache projects and initiatives since the ASF's incorporation in 1999? https://blogs.apache.org/foundation/entry/apache-in-2021-by-the 

 - Did you know that Apache DolphinScheduler won a "2021 OSC Most Popular Projects" award from OSCHINA?

 - Did you know that video recordings from the 2021 TVMCon (Apache TVM and Open Source ML acceleration conference) are now available online?

Apache Community Notices

 - Apache in 2021 - By The Digits + Video highlights 

 - The Apache Month in Review: December 2021 and video highlights

 - Watch "Trillions and Trillions Served", the documentary on the ASF 1) full feature [49 min] 2) "Apache Everywhere" [6 min] 3) "Why Apache" [2.5 min] 4) “Apache Innovation” [40 min] 

 - ASF Annual Report: FY2021 -- Press release and Report (PDF)

 - The Apache Way to Sustainable Open Source Success 

 - Foundation Reports and Statements

 - Presentations from 2021's ApacheCon Asia and ApacheCon@Home are available on the ASF YouTube channel.

 - "Success at Apache" focuses on the people and processes behind why the ASF "just works." 

Posted at 02:56PM Jan 17, 2022 by Swapnil M Mane in Newsletter  |   | 

The Apache Weekly News Round-up: week ending 7 January 2022

Welcome, 2022! We hope that you have had a festive holiday season and are excited to kick off the new year. Here's what happened over the past week:

ASF Infrastructure – our distributed team on three continents keeps the ASF's infrastructure running around the clock.
 - 7M+ weekly checks yield uptime at 99.98%. Performance checks across 50 different service components spread over more than 250 machines in data centers around the world. View the ASF's Infrastructure Uptime site to see the most recent averages.

Apache Code Snapshot – Over the past week, 280 Apache Committers changed 2,780,891 lines of code over 2,868 commits. Top 5 contributors, in order, are: Jean-Baptiste Onofré, Gary Gregory, Mark Thomas, Harikrishna Patnala, and Claus Ibsen. 

Apache Project Announcements – the latest updates by category.

Enterprise Processes Automation / ERP --
 - Apache OFBiz 18.12.05 released

Mail --
 - Apache James 3.6.1 released
    -- CVE-2021-38542: STARTTLS command injection (IMAP and POP3)
    -- CVE-2021-40110: IMAP vulnerable to a ReDoS
    -- CVE-2021-40111: IMAP parsing Denial Of Service
    -- CVE-2021-40525: Sieve file storage vulnerable to path traversal attacks 

Network Client --
 - Apache Guacamole 1.4.0 released
 - Apache MINA FTPServer 1.1.2 released

Did You Know?

 - Did you know that in 2021, 724 individuals new to the ASF contributed to Apache projects and initiatives? https://s.apache.org/Apache2021Digits

 - Did you know that Apache Druid is frequently used for AdTech data? https://druid.apache.org/

 - Did you know that PulsarSummit Asia 2022 will be held online on January 15-16? https://pulsar-summit.org/

Apache Community Notices

 - Watch "Trillions and Trillions Served", the documentary on the ASF 1) full feature [49 min] 2) "Apache Everywhere" [6 min] 3) "Why Apache" [2.5 min] 4) “Apache Innovation” [40 min] 

 - ASF Annual Report: FY2021 -- Press release and Report (PDF)

 - The Apache Way to Sustainable Open Source Success 

 - Foundation Reports and Statements

 - Presentations from 2021's ApacheCon Asia and ApacheCon@Home are available on the ASF YouTube channel.

 - "Success at Apache" focuses on the people and processes behind why the ASF "just works." 

Posted at 02:38PM Jan 10, 2022 by Swapnil M Mane in Newsletter  |   | 

Apache Month in Review: December 2021

Welcome to the latest monthly overview of events from the Apache community. Here's a summary of what happened in December  [video highlights available] :

New This Month --

- Apache Month in Review: November 2021

Important Dates --

- Next Board Meeting: 19 January 2022. Board calendar and minutes

Infrastructure --

In December, 600 Apache Committers changed 23,123,232 lines of code over 13,572 commits. The Committers with the top 5 highest contributions, in order, were: Gary Gregory, Claus Ibsen, Jean-Baptiste Onofré, Harikrishna Patnala, and Andi Huber.

Project Releases and Updates --
New releases from Apache Airflow (Workflow); APISIX (API); Archiva (Build Management); Calcite (Big Data); Camel (Integration); Daffodil (Libraries); DolphinScheduler (Workflow); Druid (Big Data); Flink (Big Data); Fortress (Identity Management); Geode (Database); Groovy (Programming Languages); HBase (Big Data); HttpComponents (Servers); HTTP Server (Servers); Ignite (Big Data); IoTDB (IoT); Jackrabbit (Content); James (Mail); JMeter (Testing); JSPWiki (Content); Karaf (Application Servers/Middleware); Kyuubi (Incubating; Big Data); Log4j (Libraries); Lucene (Search); MXNet (Incubating; Libraries); NetBeans (Integrated Development Environment); NiFi (Big Data); OFBiz (Enterprise Processes Automation / ERP); Parquet (Big Data); PDFBox (Content); PLC4X (IoT); Pulsar (Messaging); Qpid (Messaging); Skywalking (Application Performance Management); Solr (Search); Struts (Web Frameworks); Tika (Big Data); Tomcat (Servers); Traffic Control (Servers); Wicket (Web Frameworks); and XMLBeans (Library).

Apache Project Anniversaries in December: Apache Portable Runtime (APR; 21 years); Logging Services (18 years); Cayenne and OFBiz (15 years); Synapse (14 years); Camel (13 years); Axis, OpenWebBeans, Pivot (12 years); Aries (11 years); Flex (9 years); Helix (8 years); Flink (7 years); Beam (5 years); Airflow (3 years); Druid (2 years); DataSketches (1 year); ECharts (1 year); and Mnemonic (1 year). Many happy returns!

The Apache Incubator is the primary entry path for projects wishing to become an official part of the ASF. More than three dozen projects are currently undergoing development in the Apache Incubator.

# # #

To see our Weekly News Round-ups (published every Friday), visit https://blogs.apache.org/foundation/ and click on the calendar or hop directly to https://blogs.apache.org/foundation/category/Newsletter . For real-time updates, sign up for Apache-related news by sending mail to announce-subscribe@apache.org and follow @TheASF on Twitter. We appreciate your support!

Posted at 04:52PM Jan 03, 2022 by Swapnil M Mane in Newsletter  |   | 

The Apache Weekly News Round-up: week ending 31 December 2021

Here we are --the last day of the year-- we wish everyone a happy new year. Thank you for your dedicated readership: below is our final weekly round-up for 2021; we'll be back in your inbox in 2022:

ASF Infrastructure – our distributed team on three continents keeps the ASF's infrastructure running around the clock.
 - 7M+ weekly checks yield uptime at 100.00%. Performance checks across 50 different service components spread over more than 250 machines in data centers around the world. View the ASF's Infrastructure Uptime site to see the most recent averages.

Apache Code Snapshot – Over the past week, 183 Apache Committers changed 8,306,446 lines of code over 2,124 commits. Top 5 contributors, in order, are: Gary Gregory, Claus Ibsen, Michael Osipov, Jacques Le Roux, and Tilman Hausherr.

Apache Project Announcements – the latest updates by category.

Application Servers/Middleware --
 - Apache Karaf runtime 4.2.14 and 4.3.5 released 

Eventing --
 - Apache EventMesh (incubating) 1.3.0 released 

Messaging -- 
 - Apache Qpid ProtonJ2 1.0.0-M4 released
 - Apache Pulsar 2.7.4 released

Observability --
 - Apache SkyWalking Nginx LUA 0.6.0 and Satellite 0.5.0 released 

Programming Languages --
 - Apache Groovy 4.0.0-rc-2 released

Did You Know?

 - Did you know that the latest details on Apache Log4j vulnerabilities are available on the Apache Logging Services security page? https://logging.apache.org/log4j/2.x/security.html

 - Did you know that dozens of organizations such as Amazon, AT&T, Facebook (Meta), Uber, and Zillow use Apache Sedona (incubating) for their geospatial data processing pipelines? 

 - Did you know that tax-deductible donations support the ASF's day-to-day operations that benefit 350+ Apache Projects and their communities? Donate online using ACH, credit card, PayPal, Apple Pay, Google Pay, and Microsoft Pay https://donate.apache.org/

Apache Community Notices

 - The Apache Month in Review: November 2021 https://s.apache.org/November2021 and video highlights https://youtu.be/L1qMXw5MxJQ

 - Watch "Trillions and Trillions Served", the documentary on the ASF 1) full feature [49 min] 2) "Apache Everywhere" [6 min] 3) "Why Apache" [2.5 min] 4) “Apache Innovation” [40 min] 

 - ASF Annual Report: FY2021 -- Press release and Report (PDF)

 - The Apache Way to Sustainable Open Source Success 

 - Foundation Reports and Statements

 - Presentations from 2021's ApacheCon Asia and ApacheCon@Home are available on the ASF YouTube channel.

 - "Success at Apache" focuses on the people and processes behind why the ASF "just works." 

Posted at 03:25PM Jan 03, 2022 by Swapnil M Mane in Newsletter  |   |