The Apache Software Foundation Blog

Monday March 28, 2022

The Apache Weekly News Round-up: week ending 25 March 2022

We're wrapping up another great week with the following activities from the Apache community:

ASF Board – management and oversight of the business affairs of the corporation in accordance with the Foundation's bylaws.
 - Next Board Meeting: 20 April 2022. Running Board calendar and minutes are available.

ASF Infrastructure – our distributed team on three continents keeps the ASF's infrastructure running around the clock.
 - 7M+ weekly checks yield uptime at 100.00%. Performance checks across 50 different service components spread over more than 250 machines in data centers around the world. View the ASF's Infrastructure Uptime site to see the most recent averages.

Apache Code Snapshot – Over the past week, 333 Apache Committers changed 4,901,028 lines of code over 3,786 commits. Top 5 contributors, in order, are: Jean-Louis Monteiro, Jianyun Cheng, Sebastian Bazley, Benoit Tellier, and James Netherton.

Apache Project Announcements – the latest updates by category.

APIs --
 - Apache APISIX 2.13.0 released 

Big Data --
 - Apache Calcite Avatica 1.30.0 released
 - Apache SeaTunnel (Incubating) 2.1.0 released 
 - Apache Kyuubi (Incubating) 1.5.0-incubating released

Blockchain --
 - Apache Tuweni (Incubating) 2.2.0 released 

Content --
 - Apache POI 5.2.2 released 
 - Apache Syncope 2.1.11 released 
 - Apache Sling 12 released

IoT --
 - Apache IoTDB 0.13.0 released 
 - Apache StreamPipes (Incubating) 0.69.0 released

Libraries --
 - Apache OpenJPA 3.2.2 released 
 - Apache Daffodil 3.3.0 released

Messaging --
 - Apache Qpid Proton 0.37.0 and Qpid Dispatch 1.19.0 released 
 - Apache Pulsar 2.8.3 released

Search --
 - Apache Solr Operator v0.5.1 released 
 - Apache Lucene 9.1.0 released

Servers --
 - Apache Tomcat Native 1.2.32 released 


Did You Know?

- Did you know that improvements to Apache Drill 1.20 include backward compatibility with Apache Hadoop 2; connectors for Apache Phoenix; writing to JDBC data sources; support for new data file formats (including Apache Iceberg and SAS files); and API query improvements?

- Did you know that Apache Calcite 1.30 includes Babel support for <=> operator; SQL hints for temporal table join; fixtures so that dependent projects can write parser, validator, and rules tests; and upgrade jsonpath to fix CVE-2021-27568?

- Did you know that the CloudStack European User Group will be held virtually on 7 April? 

Apache Community Notices

 - Apache in 2021 - By The Digits + Video highlights 

 - Watch "Trillions and Trillions Served", the documentary on the ASF 1) full feature [49 min] 2) "Apache Everywhere" [6 min] 3) "Why Apache" [2.5 min] 4) “Apache Innovation” [40 min] 

 - ASF Annual Report: FY2021 -- Press release and Report (PDF)

 - The Apache Way to Sustainable Open Source Success 

 - Foundation Reports and Statements

 - Presentations from 2021's ApacheCon Asia and ApacheCon@Home are available on the ASF YouTube channel.

 - "Success at Apache" focuses on the people and processes behind why the ASF "just works." 

 - Follow the ASF on social media: @TheASF on Twitter and The ASF page LinkedIn

 - Follow the Apache Community on Facebook and Twitter

 - Are your software solutions Powered by Apache? Download & use our "Powered By" logos.


Stay updated about The ASF

For real-time updates, sign up for Apache-related news by sending mail to announce-subscribe@apache.org and follow @TheASF on Twitter. For a broader spectrum from the Apache community, Planet Apache provides an aggregate of Project activities as well as the personal blogs and tweets of select ASF Committers.

Monday March 21, 2022

The Apache Weekly News Round-up: week ending 18 March 2022

Happy Friday! Let's take a look at what the Apache community has been up to over the past week:

ASF Board – management and oversight of the business affairs of the corporation in accordance with the Foundation's bylaws.
 - Next Board Meeting: 20 April 2022. Running Board calendar and minutes are available.

ASF Infrastructure – our distributed team on three continents keeps the ASF's infrastructure running around the clock.
 - 7M+ weekly checks yield uptime at 100.00%. Performance checks across 50 different service components spread over more than 250 machines in data centers around the world. View the ASF's Infrastructure Uptime site to see the most recent averages.

Apache Code Snapshot – Over the past week, 328 Apache Committers changed 10,109,144 lines of code over 3,415 commits. Top 5 contributors, in order, are: Mark Thomas, Chesnay Schepler, Gary Gregory, Jean-Baptiste Onofré, and Claus Ibsen.     

Apache Project Announcements – the latest updates by category.

Big Data --
 - Apache Beam 2.37.0 released

Content --
 - Apache Jackrabbit Oak 1.6.23 released 

Cloud Computing --
 - Apache Kafka 3.0.1 released 
 - Apache Libcloud 3.5.0 released 
 - CVE-2022-26779: Apache Cloudstack: insecure random number generation affects project email invitation 

Database --
 - Apache Geode 1.13.8 released 

Integration --
 - Apache Camel 3.11.6 (LTS) released 

Libraries --
 - Apache Commons Daemon 1.3.0 released 

Messaging --
 - Apache ActiveMQ 5.17.0 released
 - Apache Curator 5.2.1 released

Observability --
 - Apache SkyWalking NodeJS 0.4.0 released 

Programming Languages --
 - Apache Groovy 4.0.1 released 

Servers --
 - Apache HTTP Server 2.4.53 released
   -- CVE-2022-23943: mod_sed: Read/write beyond bounds 
   -- CVE-2022-22721: Possible buffer overflow with very large or unlimited LimitXMLRequestBody
   -- CVE-2022-22720: HTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier
   -- CVE-2022-22719: mod_lua Use of uninitialized value of in r:parsebody
 - Apache Tomcat 8.5.77, 9.0.60, 10.0.18, 10.1.0-M12 (alpha) released
 - Apache Traffic Server 9.1.2 released
 - Apache HttpComponents Core 5.2-beta1 released

Workflow --
 - Apache Airflow Helm Chart 1.5.0 released 


Did You Know?

- Did you know that the Apache Druid community will be holding a hybrid meetup on 29 March? 

- Did you know that the Bangor Australia's Bangor Brumbies Football Club site uses Apache Wicket

- Did you know that you can support the ASF through one-time and recurring tax-deductible donations online using Apple Pay, Google Pay, and Microsoft Pay using your mobile phone? https://donate.apache.org/

Apache Community Notices

 - Apache in 2021 - By The Digits + Video highlights 

 - Watch "Trillions and Trillions Served", the documentary on the ASF 1) full feature [49 min] 2) "Apache Everywhere" [6 min] 3) "Why Apache" [2.5 min] 4) “Apache Innovation” [40 min] 

 - ASF Annual Report: FY2021 -- Press release and Report (PDF)

 - The Apache Way to Sustainable Open Source Success 

 - Foundation Reports and Statements

 - Presentations from 2021's ApacheCon Asia and ApacheCon@Home are available on the ASF YouTube channel.

 - "Success at Apache" focuses on the people and processes behind why the ASF "just works." 

 - Follow the ASF on social media: @TheASF on Twitter and The ASF page LinkedIn

 - Follow the Apache Community on Facebook and Twitter

 - Are your software solutions Powered by Apache? Download & use our "Powered By" logos.


Stay updated about The ASF

For real-time updates, sign up for Apache-related news by sending mail to announce-subscribe@apache.org and follow @TheASF on Twitter. For a broader spectrum from the Apache community, Planet Apache provides an aggregate of Project activities as well as the personal blogs and tweets of select ASF Committers.

Monday March 14, 2022

The Apache Weekly News Round-up: week ending 11 March 2022

Hello, everyone --let's review the Apache community's activities from over the past week:

ASF Board – management and oversight of the business affairs of the corporation in accordance with the Foundation's bylaws.
 - Next Board Meeting: 16 March 2022. Running Board calendar and minutes are available.

ASF Infrastructure – our distributed team on three continents keeps the ASF's infrastructure running around the clock.
 - 7M+ weekly checks yield uptime at 100.00%. Performance checks across 50 different service components spread over more than 250 machines in data centers around the world. View the ASF's Infrastructure Uptime site to see the most recent averages.

Apache Code Snapshot – Over the past week, 336 Apache Committers changed 4,769,139 lines of code over 3,697 commits. Top 5 contributors, in order, are: Jean-Baptiste Onofré, Otavio R. Piske, Gary Gregory, Andrea Cosentino, and Andi Huber.   

Apache Project Announcements – the latest updates by category.

Big Data --
 - CVE-2021-38296: Apache Spark: Key Negotiation Vulnerability

Content --
 - Apache Any23 2.7 released
   -- CVE-2022-25312: An XML external entity (XXE) injection vulnerability exists in the RDFa XSLTStylesheet extractor
 - Apache Jackrabbit 2.20.5 released 

Cloud Computing --
  - Apache CloudStack 4.16.1.0 LTS released 

Database --
 - Apache ZooKeeper 3.8.0 released
 - Apache Geode 1.12.9 released

IDE --
 - Apache NetBeans 13 released

IoT --
 - Apache IoTDB 0.12.5 released

Libraries --
 - Apache Olingo 4.9.0 released

Mail --
 - Apache James 3.7.0 released

Orchestration --
 - Apache Hop 1.2.0 released

Programming Languages --
 - Apache Groovy 2.5.16 and 3.0.10 released


Did You Know?

- Did you know that the next Apache Druid MeetUp will be held both online and in-person in Tel Aviv on 29 March? 

- Did you know that Apache ShardingSphere SQL Parse Format Function allows you to easily understand and automatically format complicated SQL statements?

- Did you know that the next Apache Airflow Community Meetup will be held on 16 March? Sign up to learn about Data Migration Pipeline with Apache Airflow http://bit.ly/3sES9fL

Apache Community Notices

 - Apache in 2021 - By The Digits + Video highlights 

 - Watch "Trillions and Trillions Served", the documentary on the ASF 1) full feature [49 min] 2) "Apache Everywhere" [6 min] 3) "Why Apache" [2.5 min] 4) “Apache Innovation” [40 min] 

 - ASF Annual Report: FY2021 -- Press release and Report (PDF)

 - The Apache Way to Sustainable Open Source Success 

 - Foundation Reports and Statements

 - Presentations from 2021's ApacheCon Asia and ApacheCon@Home are available on the ASF YouTube channel.

 - "Success at Apache" focuses on the people and processes behind why the ASF "just works." 

 - Follow the ASF on social media: @TheASF on Twitter and The ASF page LinkedIn

 - Follow the Apache Community on Facebook and Twitter

 - Are your software solutions Powered by Apache? Download & use our "Powered By" logos.


Stay updated about The ASF

For real-time updates, sign up for Apache-related news by sending mail to announce-subscribe@apache.org and follow @TheASF on Twitter. For a broader spectrum from the Apache community, Planet Apache provides an aggregate of Project activities as well as the personal blogs and tweets of select ASF Committers.

Monday March 07, 2022

The Apache Weekly News Round-up: week ending 4 March 2022

We're opening March with a cracking week. Here's what the Apache community has been up to:

Sponsor Apache – a number of tax-deductible sponsorships help offset the ASF's day-to-day operating expenses that include infrastructure support, bandwidth, connectivity, servers, hardware, development environments, legal counsel, accounting services, trademark protection, marketing and publicity, educational events, and more.
 - The Apache Software Foundation Welcomes VMware as its Newest Platinum Sponsor

ASF Board – management and oversight of the business affairs of the corporation in accordance with the Foundation's bylaws.
 - Announcing New ASF Board of Directors, elected during this week's Members' Meeting.
 - Next Board Meeting: 16 March 2022. Running Board calendar and minutes are available.

ASF Infrastructure – our distributed team on three continents keeps the ASF's infrastructure running around the clock.
 - 7M+ weekly checks yield uptime at 100.00%. Performance checks across 50 different service components spread over more than 250 machines in data centers around the world. View the ASF's Infrastructure Uptime site to see the most recent averages.

Apache Code Snapshot – Over the past week, 332 Apache Committers changed 880,561 lines of code over 3,128 commits. Top 5 contributors, in order, are: Olivier Lamy, Andrea Cosentino, Claus Ibsen, Sebastian Rühl, and Eric Milles. 

Apache Project Announcements – the latest updates by category.

Application Servers/Middleware --
 - Apache Karaf Decanter 2.9.0 released

Content --
 - Apache Jackrabbit Oak 1.22.11 released
 - Apache POI 5.2.1 released
 - CVE-2022-26336: poi-scratchpad: A carefully crafted TNEF file can cause an out of memory exception 

FinTech --
 - Apache Fineract 1.6.0 released

Libraries --
 - Apache PDFBox JBIG2 ImageIO plugin 3.0.4 released

Logging Services --
 - Apache Log4j 2.17.2 released

Network Application Framework --
 - Apache MINA FtpServer 1.1.3 released

Servers --
 - Apache Tomcat 9.0.59, 10.0.17 and 10.1.0-M11 (alpha) released 

Workflow --
 - CVE-2021-45229: Apache Airflow: Reflected XSS via Origin Query Argument in URL


Did You Know?

- Did you know that the Apache Ignite community's CFP for IgniteSummit (taking place online 14 June) closes on 29 April?

- Did you know that HugeGraph (incubating), a large-scale and easy-to-use graph database that stores and queries billions of vertices and edges, is the newest podling undergoing development in the Apache Incubator?

- Did you know that the ASF manages 2,180 mailing lists, 486 of which are private? Over the past year, 19,053 authors sent 1,946,990 emails on 869,461 topics! 

Apache Community Notices

 - Apache in 2021 - By The Digits + Video highlights 

 - The Apache Month in Review: January 2022 and video highlights

 - Watch "Trillions and Trillions Served", the documentary on the ASF 1) full feature [49 min] 2) "Apache Everywhere" [6 min] 3) "Why Apache" [2.5 min] 4) “Apache Innovation” [40 min] 

 - ASF Annual Report: FY2021 -- Press release and Report (PDF)

 - The Apache Way to Sustainable Open Source Success 

 - Foundation Reports and Statements

 - Presentations from 2021's ApacheCon Asia and ApacheCon@Home are available on the ASF YouTube channel.

 - "Success at Apache" focuses on the people and processes behind why the ASF "just works." 

 - Follow the ASF on social media: @TheASF on Twitter and The ASF page LinkedIn

 - Follow the Apache Community on Facebook and Twitter

 - Are your software solutions Powered by Apache? Download & use our "Powered By" logos.


Stay updated about The ASF

For real-time updates, sign up for Apache-related news by sending mail to announce-subscribe@apache.org and follow @TheASF on Twitter. For a broader spectrum from the Apache community, Planet Apache provides an aggregate of Project activities as well as the personal blogs and tweets of select ASF Committers.

Calendar

Search

Hot Blogs (today's hits)

Tag Cloud

Categories

Feeds

Links

Navigation